Principal Software Quality Engineer, SaMD, Cybersecurity

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide independent quality oversight for software development activities, ensuring adherence to SDLC procedures, design controls, and relevant regulatory requirements.

• Review and endorse software development plans, requirements, architecture and design documentation, verification and validation protocols, test reports, and release documentation.

• Ensure traceability of requirements, configuration management, software risk management, and design controls throughout the product lifecycle.

• Assess software changes for their effects on patient safety, product effectiveness, cybersecurity, and regulatory submission needs.

• Integrate risk-based quality controls into Agile development practices, DevSecOps, CI/CD pipelines, and automated testing processes.

• Supervise medical device cybersecurity initiatives, including threat modeling, security risk assessments, vulnerability analyses, and validation of cybersecurity risk controls.

• Guarantee compliance with FDA cybersecurity mandates, IEC 81001-5-1, AAMI TIR57, AAMI TIR97, and other pertinent standards.

• Manage SBOMs, third-party software components, vulnerability monitoring, patch management, and cybersecurity incident responses.

• Evaluate cybersecurity testing evidence, including penetration testing, static and dynamic application security testing, and software composition analysis.

• Oversee software verification and validation efforts, including unit, integration, system, regression, performance, and security testing.

• Assist with software and cybersecurity documentation for FDA 510(k) submissions, international regulatory filings, audits, and inspections.

• Ensure the completeness, accuracy, and traceability of software DHFs, risk management documentation, and QMS records.

• Lead or assist in nonconformance investigations, root cause analysis, CAPA, and the evaluation of complaints, defects, and post-market cybersecurity vulnerabilities.

• Establish and track software quality metrics, including defect trends, test coverage, CAPA effectiveness, cybersecurity remediation, and release quality.

• Act as a software quality and cybersecurity subject matter expert, communicate risks and compliance status to management, and promote continuous improvement.

⛳️ Requirements

• Bachelor’s degree in Software Engineering, Computer Science, Biomedical Engineering, Electrical Engineering, Cybersecurity, or a related technical field.

• At least 8 years of experience in software quality engineering, software development, software verification and validation, or related areas.

• Minimum of 5 years of experience with FDA-regulated medical devices, Software as a Medical Device (SaMD), digital health, or connected medical device software.

• Proven experience with IEC 62304, ISO 13485, ISO 14971, FDA design controls, and software risk management.

• Familiarity with medical device cybersecurity, secure software development, cybersecurity risk assessments, and vulnerability management.

• Experience with Agile software development, DevSecOps, CI/CD pipelines, automated testing, and software configuration management.

• Experience in supporting FDA regulatory submissions, software change assessments, audits, CAPA investigations, and regulatory inspections.

• Preferred experience with cloud-based software, healthcare applications, or connected medical device systems.

• Advanced degree or relevant professional certifications such as CISSP, CSSLP, CISM, ASQ CSQE, CQE, or applicable auditor certifications are preferred.

• In-depth knowledge of medical device software quality engineering, software development lifecycle processes, design controls, and relevant FDA and international regulatory requirements.

• Strong understanding of medical device cybersecurity standards, secure software development practices, and cybersecurity risk management.

• Proficient in software verification and validation, automated testing, requirements traceability, and configuration management.

• Familiarity with Jira, Azure DevOps, GitHub, and GitLab.

• Understanding of cloud-based architectures, APIs, network security, third-party software, and healthcare interoperability technologies.

• Ability to provide technical leadership and influence cross-functional teams without direct reporting authority.

• Capability to balance regulatory compliance, patient safety, cybersecurity considerations, and business goals.

• Excellent written and verbal communication skills.

• Strong organizational abilities with the capacity to manage multiple priorities in a fast-paced software development environment.

• Detail-oriented, proactive, and accountable, with a commitment to continuous improvement, quality ownership, and sound professional judgment.

🏝️ Benefits

• Comprehensive medical, dental, and vision insurance.

• Financial planning support.

• Discounts for physical and mental wellness programs.

• Unlimited access to an online learning platform.

• Paid Time Off (hourly) / Flex Time Off (salaried) programs for full-time employees.

• Opportunities for growth and development.

• 401(k) plan with a 3% company match.

• Paid holidays.

• Paid parental leave, including a flexible return-to-work program.

• Employee Assistance Program.

• Discounts on popular mobile phone plan providers.

• Life and disability insurance.