Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.

Die Position

TheNetwork Security product makes Roche’s connectivity accessible and secure through actionable, policy-driven processes. The capabilities we provide enable Roche to identify, inspect, and mitigate cloud-based risks, manage regulatory compliance, and oversee egress/ingress traffic across all layers. Our solutions are primarily instantiated through leading-edge security platforms and automated orchestration. We work closely with Cloud, Infrastructure, and Incident Response teams to provide enterprise visibility into Roche’s network security posture.

As a Cloud Security Engineer, you will be part of the Information Systems Security team at Roche. You will join a integral team of 40 engineers with expertise spanning Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This is an incredible opportunity to jumpstart your career, learn from senior experts, and grow your skills in a world-class enterprise security environment.
Job description

In the role of Cloud Security Engineer, you will integrate into the Information Systems Security division at Roche. You will be part of a global collective of 40 technical specialists whose proficiency encompasses Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This position offers a premier chance to launch your professional journey, gaining insights from seasoned experts and refining your capabilities within a sophisticated enterprise security framework

Responsibilities

1. Architecture& Design

- Collaboratively, develop and improve the security features and engineering capabilities for the Roche Cloud Platform (automatic deployment pipelines, secure controls and guardrails, abstraction layers to ease Cloud adoption, delegation capabilities to enable self-service functionality to end customers, etc.).
- Contribute, based on Security Epics, to the Cloud SecDevOps Engineering team on technical implementations and decisions and provide software security architecture and insight for propositions,



product designs and service enhancements.

​
2. Product Lifecycle& Evolution

- Drive through all stages of the software development lifecycle, from requirements gathering and discussions with the Product Owner/Customer to the implementation and deployment of the security features, controls as code, and implement security policies and remediation processes using CI/CD.
- Focuses on priorities, milestones and deliverables as per direction of the product management team and Security Requirements.

​
3. Operational Excellence& Visibility

- Work with the Cloud SecDevops Engineering team to collaborate with stakeholders, customers, and external teams to improve Security posture of the Platform.
- Be part of the technical solution team focusing on maintaining service since they are live by measuring and monitoring availability and overall system health and improving the reliability of the IT Infrastructure

Qualification

Education / Experience

•
Educational Background: Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related technical discipline, or equivalent foundational experience (e.g., intensive cloud/security training programs).

- Professional Experience: 1+ years of foundational experience in IT security, cloud administration, or software development (strong academic projects or internships will also be considered).
- Agile Methodology: Experience or familiarity working within an Agile/Scrum team structure.
- Collaborative Environment: Proven ability to collaborate effectively with engineering or cross-functional product teams to solve technical challenges.

Technical Skills

- AWS Cloud Infrastructure: Foundational, hands-on familiarity with core AWS services, specifically across computing, networking, storage, and databases.
- Cloud Security Basics: Conceptual understanding or baseline exposure to AWS native security services such as GuardDuty and Security Hub.
- Infrastructure as Code (IaC)& Scripting: Baseline working knowledge of Terraform for provisioning infrastructure and Python for automation scripting.
- Version Control: Foundational knowledge of Git and standard Gitflow branching practices.
- SDLC& CI/CD:



Basic understanding of the software development lifecycle (SDLC) and how CI/CD pipelines function to deploy software or infrastructure.

Skills below will be considered a plus:

- Cloud Networking experience with VPC subnets, Security Groups, Transit Gateway, Network Firewall.
- Application Networking experience with AWS API Gateway, NLB/ALB.
- Preferred to be certified AWS Architect Professional/DevOps or equivalent working knowledge on AWS environments,
- Familiarity with Palo Alto Next-Generation Firewalls (NGFW)
- Containers/serverless services knowledge.
- Experience with modern tools in the Agile Software Development Life Cycle.
- Experience on development workflow (i.e. JIRA).

Leadership Skills

- Communication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.
- Innovation& Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques.
- Thriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high-level security requirements into functional network policies.
- Self-Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle.

​
Additional Qualifications

- Demonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques
- Strong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks
- Demonstrated interpersonal, collaborative and commitment to operational excellence skills.

Wer wir sind

Eine gesündere Zukunft treibt uns zur Innovation an. Mehr als 100.000 Mitarbeiter weltweit arbeiten gemeinsam daran, wissenschaftliche Fortschritte zu erzielen und sicherzustellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und für zukünftige Generationen. Durch unser Engagement werden über 26 Millionen Menschen mit unseren Medikamenten behandelt und mehr als 30 Milliarden Tests mit unseren Diagnostik-Produkten durchgeführt. Wir ermutigen uns gegenseitig, neue Möglichkeiten zu erkunden, Kreativität zu fördern und hohe Ziele zu setzen, um lebensverändernde Gesundheitslösungen zu liefern.

Gemeinsam können wir eine gesündere Zukunft gestalten.

Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.

📌 Cybersecurity Engineer for Edge Defense (Cloud) (Madrid)
🏢 Roche
📍 Madrid