At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.The PositionThe Security Engineer plays a vital role in protecting Roche Manufacturing systems and networks against cybersecurity threats. This role provides local architecture and engineering support, assisting system owners and administrators in keeping their manufacturing environment up to date with the latest Roche Manufacturing Cybersecurity standards, baselines and industry best practices.Taking part in technical design reviews, integration, testing, and documentation activities concerning new OT systems and/or changes to existing manufacturing system or infrastructureSupporting development of Manufacturing Cybersecurity standards and baselines OT Cybersecurity Advisor during OT System planning phase and OT System Risk Assessment processLeveraging secure, corporate-compliant AI accelerators and enterprise-ready platforms to automate routine log analysis, scripting, and threat modeling, effectively minimizing defensive response times against machine-speed cyber threatsAdvising System Owners in selecting appropriate security measures to mitigate riskCoordinating of OT services and activities delivered by VendorsReviewing local technical designs as part of Manufacturing Cybersecurity Requests (in ServiceNow)Designing and sustaining OT Security Monitoring (IIDS) at the Manufacturing SiteProviding technical support during Incident Response process including steps to minimise the impact, conducting a technical and forensic investigation into how the breach happened and the extent of the damageWorking closely with System Owners, Cybersecurity Site Representative and is a catalyst for cross-site collaboration on topics related to Manufacturing CybersecurityJob ResponsibilitiesSupports end-to-end security analysis tasks under the supervision of senior engineers and contributes to team goalsActively learns from senior team members and participates in the application of security best practicesStakeholder ManagementAssists in communicating security requirements to stakeholders and collaborates effectively with cross-functional team membersSupports stakeholder engagement activities and contributes to workshops and meetings to align with project objectivesImpact/StrategyDemonstrates consistent performance on assigned tasks within specific products or defined project modulesContributes to the implementation of plans that align with team objectives and actively participates in established team processesComplexitySupports business analysis activities on assigned project components or specific tasks within a domainHandles clearly defined requirements under guidance, engages with identified stakeholders, and contributes to the evaluation of immediate solution impactsBusiness/Technical abilityDemonstrates a developing understanding of the business domain, related technologies, and their interdependenciesApplies foundational tools, principles, concepts, and techniques related to requirements, data, and process analysis under supervision to support efficiency and effectivenessQualificationsEducation / ExperienceFoundational knowledge of cybersecurity principles and a strong eagerness to develop technical security skills in a manufacturing environmentDemonstrated potential to collaborate effectively within a team and build productive relationships with stakeholdersCommitment to learning and taking ownership of assigned tasks within security projects or incident supportBachelor’s degree in Computing Engineering, Automation Engineering or similar is an assetTechnical Skills0-3 years of experience in the IT or Cyber Security fieldSome knowledge about local manufacturing and automation systems in use according to the current industry standards is an assetFamiliarity with emerging AI security standards and risk models. Eagerness to utilize secure, enterprise-ready AI productivity and engineering tools to assist in routine log analysis, scripting, and threat modeling workflowsDeveloping ability to apply tools, principles, and concepts related to requirements, data, usability, and process analysis within the security domain under supervisionAbility to support the analysis of technology fit and contribute to the evaluation of effective, strategically aligned cybersecurity solutions and controlsAdditional QualificationsThe following skills and/or qualifications are an assetExpertise in anti-virus software, intrusion detection, firewalls and content filtering in OTKnowledge of risk assessment tools,



technologies and methodsExpertise in designing secure networks, systems and application architecturesDisaster recovery, computer forensic tools, technologies and methodsSystem administration, supporting multiple platforms and applicationsEndpoint security solutions, including file integrity monitoringDeep understanding of cybersecurity terms and principles (defense-in-depth, network segmentation, security monitoring and incident response, access management, OT patch management, secure remote access, anti-malware protection etc.)Advanced knowledge on networking (LAN/WAN) and industrial networking including significant low-level networking experience with the TCP/IP (Transmission Control Protocol/Internet Protocol)Solid knowledge on IT and OT infrastructure, including PLC security and protectionCurrent knowledge of technology capabilities and trends; types, and techniques of hacking attacksJava, Net, C++, Python, bash, power shellOne of five potential security-related certifications (Certified Ethical Hacker (CEH), CompTIA Security+, Certified Information System Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Specialist certification, Global Industrial Cyber Security Professional (GICSP))Solid knowledge on IT infrastructure and service deployment model within RocheWe support a adaptable work environment with an expectation of working from the office approximately 40% of the time (typically two days per week Office presence required).Please note that relocation assistance is not provided for this position; candidates must alreadybe authorized to work and live within commuting distance.Who we areA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together.Roche is an Equal Opportunity Employer.#J-18808-Ljbffr

📌 Security Engineer - Manufacturing Cybersecurity (Madrid)
🏢 Roche
📍 Madrid