Chez Roche, vous pouvez être vous-même et être apprécié pour les qualités uniques que vous apportez. Notre culture encourage l'expression personnelle, le dialogue ouvert et les connexions authentiques, où vous êtes valorisé, accepté et respecté pour ce que vous êtes, vous permettant de prospérer tant personnellement que professionnellement. Voici comment nous visons à prévenir, arrêter et guérir les maladies et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir. Rejoignez Roche, où chaque voix compte.

La position

The Security Engineer plays a vital role in protecting Roche Manufacturing systems and networks against cybersecurity threats. This role provides local architecture and engineering support, assisting system owners and administrators in keeping their manufacturing environment up to date with the latest Roche Manufacturing Cybersecurity standards, baselines and industry best practices.

- Taking part in technical design reviews, integration, testing, and documentation activities concerning new OT systems and/or changes to existing manufacturing system or infrastructure.
- Supporting development of Manufacturing Cybersecurity standards and baselines OT Cybersecurity Advisor during OT System planning phase and OT System Risk Assessment process.
- Leveraging secure, corporate-compliant AI accelerators and enterprise-ready platforms to automate routine log analysis, scripting, and threat modeling, effectively minimizing defensive response times against machine-speed cyber threats.
- Advising System Owners in selecting appropriate security measures to mitigate risk.
- Coordinating of OT services and activities delivered by Vendors.
- Reviewing local technical designs as part of Manufacturing Cybersecurity Requests (in ServiceNow).
- Designing and sustaining OT Security Monitoring (IIDS) at the Manufacturing Site.
- Providing technical support during Incident Response process including steps to minimize the impact, conducting a technical and forensic investigation into how the breach happened and the extent of the damage.
- Working closely with System Owners, Cybersecurity Site Representative and is a catalyst for cross-site collaboration on topics related to Manufacturing Cybersecurity.

Job Responsibilities

The Security Engineer is a member of the Manufacturing Cybersecurity Engineering team led by the Head of Manufacturing Cybersecurity Engineering and part of the Security Platforms subfunction in the Information Security function at Roche.

- Supports end-to-end security analysis tasks under the supervision of senior engineers and contributes to team goals.
- Actively learns from senior team members and participates in the application of security best practices.





Stakeholder Management

- Assists in communicating security requirements to stakeholders and collaborates effectively with cross-functional team members.
- Supports stakeholder engagement activities and contributes to workshops and meetings to align with project objectives.

Impact/Strategy

- Demonstrates consistent performance on assigned tasks within specific products or defined project modules.
- Contributes to the implementation of plans that align with team objectives and actively participates in established team processes.

Complexity

- Supports business analysis activities on assigned project components or specific tasks within a domain.
- Handles clearly defined requirements under guidance, engages with identified stakeholders, and contributes to the evaluation of immediate solution impacts.

Business/Technical ability

- Demonstrates a developing understanding of the business domain, related technologies, and their interdependencies.
- Applies foundational tools, principles, concepts, and techniques related to requirements, data, and process analysis under supervision to support efficiency and effectiveness.

Qualifications

Education / Experience

- Foundational knowledge of cybersecurity principles and a strong eagerness to develop technical security skills in a manufacturing environment.
- Demonstrated potential to collaborate effectively within a team and build productive relationships with stakeholders.
- Commitment to learning and taking ownership of assigned tasks within security projects or incident support.
- Bachelor’s degree in Computing Engineering, Automation Engineering or similar is an asset.

Technical Skills

- 0-3 years of experience in the IT or Cyber Security field.
- Some knowledge about local manufacturing and automation systems in use according to the current industry standards is an asset.
- Familiarity with emerging AI security standards and risk models. Eagerness to utilize secure, enterprise-ready AI productivity and engineering tools to assist in routine log analysis, scripting, and threat modeling workflows.
- Developing ability to apply tools, principles, and concepts related to requirements, data, usability, and process analysis within the security domain under supervision.
- Ability to support the analysis of technology fit and contribute to the evaluation of effective,



strategically aligned cybersecurity solutions and controls.

Additional Qualifications

The following skills and/or qualifications are an asset

- Expertise in anti-virus software, intrusion detection, firewalls and content filtering in OT.
- Knowledge of risk assessment tools, technologies and methods.
- Expertise in designing secure networks, systems and application architectures.
- Disaster recovery, computer forensic tools, technologies and methods.
- System administration, supporting multiple platforms and applications.
- Endpoint security solutions, including file integrity monitoring.
- Deep understanding of cybersecurity terms and principles (defense-in-depth, network segmentation, security monitoring and incident response, access management, OT patch management, secure remote access, anti-malware protection etc.).
- Advanced knowledge on networking (LAN/WAN) and industrial networking including significant low-level networking experience with the TCP/IP (Transmission Control Protocol/Internet Protocol).
- Solid knowledge on IT and OT infrastructure, including PLC security and protection.
- Current knowledge of technology capabilities and trends; types, and techniques of hacking.
- attacks
- Java, Net, C++, Python, bash, power shell.
- One of five potential security-related certifications (Certified Ethical Hacker (CEH), CompTIA Security+, Certified Information System Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Specialist certification, Integral Industrial Cyber Security Professional (GICSP)).
- Solid knowledge on IT infrastructure and service deployment model within Roche.

We support a flexible work environment with an expectation of working from the office approximately 40% of the time (typically two days per week Office presence required).

Please note that relocation assistance is not provided for this position; candidates must already be authorized to work and live within commuting distance.

Qui nous sommes

Un avenir plus sain nous pousse à innover. Ensemble, plus de 100 000 employés à travers le monde sont dédiés à faire progresser la science et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir. Nos efforts aboutissent à plus de 26 millions de personnes traitées avec nos médicaments et plus de 30 milliards de tests réalisés avec nos produits de Diagnostique. Nous nous encourageons mutuellement à explorer de nouvelles possibilités, à favoriser la créativité et à conserver nos grandes ambitions, afin de fournir des solutions de santé qui changent des vies et ont un impact mondial.

Construisons ensemble un avenir plus sain.

Roche est un employeur offrant l'équité en matière d'emploi.

#J-18808-Ljbffr

📌 Security Engineer - Manufacturing Cybersecurity (Madrid)
🏢 Roche Holding
📍 Madrid