Overview

As a Penetration Tester in Roche’s Product Security & Privacy Organization, you help secure Roche’s digital healthcare solutions. You will perform vulnerability assessments and pen tests across digital, cloud, and medical device products, guiding teams toward safer designs. Your work supports patient safety and trustworthy innovation at scale. This role offers the chance to influence security by design across a general product portfolio and to collaborate with cross-functional teams in a mission-driven environment.

Responsabilidades

- Conduct penetration testing across digital solutions, cloud apps, and medical devices
- Identify and prioritize vulnerabilities with product teams throughout the lifecycle
- Provide security guidance during design and development to ensure secure-by-design
- Contribute to and maintain a central repository of testing methods and tools
- Support Incident Response with technical analysis and forensics
- Execute red team exercises to test resilience
- Prepare security reports with risk assessments and actionable recommendations
- Promote defense-in-depth and security-by-design across product lines
- Improve processes, playbooks,



and tooling for scalable product security
- Leverage AI-assisted security tools to enhance testing scope and efficiency

Requisitos principales

- 2+ years leading and executing penetration testing across web apps, APIs, cloud environments, or embedded devices
- Bachelor’s degree in Computer Science, Information Systems, or related field (preferred)
- Solid background in vulnerability assessment and penetration testing
- Knowledge of OWASP Top 10 and SDLC security practices
- Experience automating security controls (e.g., shell scripting, Python)
- Understanding of information security and privacy risks
- Strong communication of complex vulnerabilities to technical and non-technical stakeholders
- Proactive, collaborative, self-driven mindset with continuous learning
- Relevant industry certifications valued (e.g., SANS GIAC, OSCP, CISSP, CEH)
- Interest in emerging AI technologies and LLM vulnerabilities

- strong communication
- teamwork
- leadership
- penetration testing
- vulnerability assessment
- red team

📌 Penetration Tester (San Cugat del Vallés)
🏢 Roche
📍 San Cugat del Vallés