At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.The PositionThe Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a Cybersecurity Engineer, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users. Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources. All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. Cybersecurity are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems.As a member of the Incident Response Enablement team, you are encouraged to support on-call rotation during weekends, and will be mobilized during major incidents.Job ResponsibilitiesMonitoring and Incident Response for a global environmentElicit feedback and obtain data to continuously strengthen detection and response processesBe a force of proposition to steer continuous improvement efforts,



partnering with other teams within the Cybersecurity spaceEnhance the platforms and automations that empower detection, investigation and responseDrive remediation efforts by turning investigations and lessons learned into structural improvements across the company, partnering with other experts across the Roche groupBrief peers and leadership on threats relevant to the Roche groupCommunicate information security concepts and situations to senior managementOrganize structured knowledge exchange sessions with partners and peersMentor team membersQualificationsEducation / Experience / Technical SkillsBachelor’s degree in a technical field and 5+ years of experience in information security, including at least 3 years in a SOC/CERT/CSIRT environmentAbility to design and implement complex security systems and processes to strengthen Roche’s postureFamiliarity with TLP and information sharing best practicesAbility to communicate information security-related concepts and situations to a non-technical audienceDemonstrated ability to analyze, triage, and escalation information security incidentsAbility to take decisions,



often under pressure and given partial informationKnowledge of detection engineering and threat-hunting conceptsScripting and programming skills (Python, Javascript, Go, Rust)Demonstrated knowledge of operating systems (Windows, Linux, macOs )Experience in Cloud security for major providersExcellent organization and communication skillsAttention to detailFluent spoken and written EnglishAdditional QualificationsNetwork and Endpoint security monitoring experience in a large complex environmentKnowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, …)Experience designing/building/improving logging, monitoring and detection pipelinesCapacity to identify vulnerabilities, propose pragmatic hardening measures, and influence platform or development teamsFamiliarity with various defensive AND offensive security toolsetsA passion for the field of computer and network securityWho we areA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a integral impact.Let’s build a healthier future, together.Roche is an Equal Opportunity Employer.
#J-18808-Ljbffr

📌 Cybersecurity Engineer - Monitoring & Incident Response (Madrid)
🏢 Roche
📍 Madrid