Overview In this role, you will strengthen Roche’s product security to protect patient safety and business interests.

You’ll lead cybersecurity initiatives within cross

- functional teams, analyze security incidents, and refine operational playbooks.

You will drive threat intelligence, security monitoring, and remediation efforts across Roche products in collaboration with the Diagnostic Division.

This is a chance to shape secure products at scale and contribute to a healthier future.

Responsabilidades

- Proactively identify security flaws in Roche’s product security and advise on remediation
- Lead cybersecurity projects end-to-end and run cross-functional meetings with product teams
- Analyze logs, artifacts, and network data to trace attack paths and determine root cause
- Coordinate security incident response and remediation efforts across isolation, analysis, and containment
- Operate and optimize enterprise security tools (SIEM) and security processes
- Gather threat intelligence (including OSINT) to anticipate cyber threats and enhance monitoring
- Support customer inquiries, pre-sales, M&A;, and cybersecurity-related negotiations




- Contribute to integrating cybersecurity capabilities into Roche products within the Diagnostic Division
- Develop and refine playbooks, SOPs, and automated response frameworks
- Mentor team members and provide guidance to less experienced staff Requisitos principales
- Experience in security operations, security testing, and incident response
- Hands-on management of network security controls (Firewalls, IDS/IPS) and SIEM
- Automation of security controls (shell scripting, Python)
- Experience in information security and privacy risk management and threat modeling
- Experience in system and cloud infrastructure hardening and monitoring
- Knowledge of threat modeling, MITRE ATT&CK;, and related assessment methods
- Specialist knowledge in malware analysis, incident response, EDR/XDR, SIEM, or threat intelligence
- 5+ years of relevant cybersecurity experience or BS/MS plus equivalent
- Professional certifications are a plus (e.g., AWS Certified Security, CISSP, GSEC, GCIH, Network+/Security+)
- leadership and autonomous project management
- strong communication and stakeholder engagement
- mentoring and coaching
- Security operations
- Security testing
- Incident response

📌 Senior Product Cybersecurity Analyst (Barcelona)
🏢 Roche
📍 Barcelona