We are looking for a highly skilled Cybersecurity Engineer responsible for protecting our digital footprint at the endpoint level. Our team manages critical security products across the enterprise, including Endpoint Detection and Response (EDR), Application Control, and Secure Data Erasure.Job ResponsibilitiesMaintenance at scale: Configure, deploy, and maintain our general Endpoint Detection and Response (EDR) solution across thousands of endpoints (Windows, mac OS, and Linux) to ensure peak performanceApplication Control Governance: Design, implement, and fine-tune Application Control policies (e.G., App Locker, WDAC, or third-party equivalents) to ensure only trusted executables, scripts, and libraries run within our environment, balancing security with user productivityOptimization: Continuous evaluation to minimize false positives, optimize system performance, and improve the overall signal-to-noise ratioSecure Data Erasure Lifecycle: Support the maintenance and auditing of our enterprise-grade secure data wiping servicesAutomation: Leverage a development mindset to build scripts, tools, and API integrations that automate repetitive engineering tasks and deployment processesCross-Functional Collaboration: Partner with other senior cybersecurity experts, translating their deep security requirements into scalable, automated technical solutionsQualificationsBachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or equivalent practical experience3+ years of proven, hands-on experience managing EDR solutions (e.G., Cortex XDR, Crowd Strike, Microsoft Defender for Endpoint)



in a large-scale enterprise environmentProficiency in written and spoken English (C1 or above level)Technical SkillsSecurity Foundations: Good fundamental understanding of enterprise cybersecurity, specifically around endpoint security (EDR/XDR platforms like Cortex XDR), application whitelisting, and secure data handlingApplication Control Expertise: Strong practical experience designing, rolling out, and maintaining Application Control/Whitelisting strategies across complex organizational structuresOS Internals: Strong understanding of operating system architectures, processes, memory management and filesystems (Windows, Linux, mac OS)Analytical Mindset: Excellent troubleshooting skills with the ability to dive into complex system logs to trace issues back to their root causeAutomation & Deployment: Hands-on experience with configuration management and deployment tools (e.G., Ansible, Terraform, SCCM, Microsoft Intune, Jamf)Development Best Practices: Solid understanding of software development lifecycles (SDLC), version control (Git), and CI/CD pipelines (e.G., Git Lab CI, Jenkins, Git Hub Actions)Additional QualificationsThe "Builder" Mentality: You look at a manual, repetitive IT task and immediately think about how to write a script to do it better and fasterProblem Solver: Capable of troubleshooting complex deployment failures across varied endpoint environmentsAdaptable: Comfortable working in a highly dynamic cybersecurity environment where priorities can shift based on emerging needsTeam Player: Ability to collaborate effectively with internal and external team mates and stakeholdersCompensation & BenefitsThis position also offers an attractive benefits package. Learn more about how we reward our employees at Roche.Roche is an Equal Opportunity Employer.

📌 Cybersecurity Engineer - Endpoint (Madrid)
🏢 Roche
📍 Madrid