OverviewAs a Senior Penetration Tester in Roche's Product Security & Privacy Organization, you lead vulnerability assessments and red-team activities across digital solutions, cloud apps, and medical devices.

You collaborate with engineering and product teams to embed security by design and strengthen cyber defenses in healthcare products.

Your work directly protects patient trust and enables safe innovation at scale.

You mentor peers, drive reusable testing practices, and push automation and AI-enabled threat simulations to stay ahead of attackers.

ResponsabilidadesDesign, prioritize, and lead internal penetration testing across diverse product portfolios (digital, cloud, medical devices)

Identify vulnerabilities proactively and drive remediation throughout the product lifecycle

Provide security guidance during design and development to ensure security by design

Mentor and coach junior and mid-level pentesters

Maintain and evolve central testing methods/tools repository for reuse

Support Incident Response with technical analysis and forensics

Execute red team exercises to assess resilience





Prepare security reports with risk assessments and actionable recommendations

Contribute to integrating defense and security-by-design across product lines

Optimize processes, playbooks, and tools for scalable product security

Explore automation and offensive AI capabilities in the testing lifecycle

Requisitos principalesSenior-level experience (5+ years) in offensive security across cloud, web, APIs, and devices

Solid background in vulnerability assessment and penetration testing

Strong knowledge of OWASP Top 10 and SDLC methodologies

Experience automating security controls (shell scripting, Python)

Understanding of information security and privacy risks

Strong communication skills to translate vulnerabilities to technical and non-technical stakeholders

Leadership, teamwork, and mentoring abilities

Industry certifications such as SANS GIAC, OSCP, CISSP, CISA, CISM are highly valued

Knowledge of AI/ML security risks and offensive AI capabilities is a plus communication leadership collaboration penetration testing vulnerability assessment security by design

📌 Cybersecurity Senior Penetration Tester (Barcelona)
🏢 Roche
📍 Barcelona