Overview

As a Senior Penetration Tester in Roche's Product Security & Privacy Organization, you lead vulnerability assessments and red-team activities across digital solutions, cloud apps, and medical devices. You collaborate with engineering and product teams to embed security by design and strengthen cyber defenses in healthcare products. Your work directly protects patient trust and enables safe innovation at scale. You mentor peers, drive reusable testing practices, and push automation and AI-enabled threat simulations to stay ahead of attackers.

Responsabilidades

- Design, prioritize, and lead internal penetration testing across diverse product portfolios (digital, cloud, medical devices)
- Identify vulnerabilities proactively and drive remediation throughout the product lifecycle
- Provide security guidance during design and development to ensure security by design
- Mentor and coach junior and mid-level pentesters
- Maintain and evolve central testing methods/tools repository for reuse
- Support Incident Response with technical analysis and forensics
- Execute red team exercises to assess resilience
- Prepare security reports with risk assessments and actionable recommendations




- Contribute to integrating defense and security-by-design across product lines
- Optimize processes, playbooks, and tools for scalable product security
- Explore automation and offensive AI capabilities in the testing lifecycle

Requisitos principales
- Senior-level experience (5+ years) in offensive security across cloud, web, APIs, and devices
- Solid background in vulnerability assessment and penetration testing
- Strong knowledge of OWASP Top 10 and SDLC methodologies
- Experience automating security controls (shell scripting, Python)
- Understanding of information security and privacy risks
- Strong communication skills to translate vulnerabilities to technical and non-technical stakeholders
- Leadership, teamwork, and mentoring abilities
- Industry certifications such as SANS GIAC, OSCP, CISSP, CISA, CISM are highly valued
- Knowledge of AI/ML security risks and offensive AI capabilities is a plus

- communication
- leadership
- collaboration
- penetration testing
- vulnerability assessment
- security by design

📌 Cybersecurity Senior Penetration Tester (San Cugat del Vallés)
🏢 Roche
📍 San Cugat del Vallés