Cybersecurity Engineer - Monitoring & Incident Response

Roche Farma, S.A.

Location: Madrid
Work arrangement: On-site
Job type: Full-time
Posted 3 days ago

Apply on original website

Opens roche.wd3.myworkdayjobs.com in a new tab. Check the address before sharing personal information.

Key skills in this ad

Skills and tools

Cybersecurity
Python
JavaScript
Rust
Linux
IAM

Experience

5+ years of experience
at least 3 years

Languages

English

Qualifications

About this role

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a Cybersecurity Engineer, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users. Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources. All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. Cybersecurity are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems.

As a member of the Incident Response Enablement team, you are encouraged to support on-call rotation during weekends, and will be mobilized during major incidents.

Job Responsibilities

Monitoring and Incident Response for a global environment

Elicit feedback and obtain data to continuously strengthen detection and response processes

Be a force of proposition to steer continuous improvement efforts, partnering with other teams within the Cybersecurity space

Enhance the platforms and automations that empower detection, investigation and response

Drive remediation efforts by turning investigations and lessons learned into structural improvements across the company, partnering with other experts across the Roche group

Brief peers and leadership on threats relevant to the Roche group

Communicate information security concepts and situations to senior management

Organize structured knowledge exchange sessions with partners and peers

Mentor team members

Qualifications

Education / Experience / Technical Skills

Bachelor’s degree in a technical field and 5+ years of experience in information security, including at least 3 years in a SOC/CERT/CSIRT environment

Ability to design and implement complex security systems and processes to strengthen Roche’s posture

Familiarity with TLP and information sharing best practices

Ability to communicate information security-related concepts and situations to a non-technical audience

Demonstrated ability to analyze, triage, and escalate information security incidents

Ability to take decisions, often under pressure and given partial information

Knowledge of detection engineering and threat-hunting concepts

Scripting and programming skills (Python, Javascript, Go, Rust)

Demonstrated knowledge of operating systems (Windows, Linux, macOs )

Experience in Cloud security for major providers

Excellent organization and communication skills

Attention to detail

Fluent spoken and written English

Additional Qualifications

Network and Endpoint security monitoring experience in a large complex environment

Knowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, …)

Experience designing/building/improving logging, monitoring and detection pipelines

Capacity to identify vulnerabilities, propose pragmatic hardening measures, and influence platform or development teams

Familiarity with various defensive AND offensive security toolsets

A passion for the field of computer and network security

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

We believe it’s urgent to deliver medical solutions right now – even as we develop innovations for the future. We are passionate about transforming patients’ lives. We are courageous in both decision and action. And we believe that good business means a better world.

That is why we come to work each day. We commit ourselves to scientific rigor, unassailable ethics, and access to medical innovations for all. We do this today to build a better tomorrow.

We are proud of who we are, what we do, and how we do it. We are many, working as one across functions, across companies, and across the world.

We are Roche.

Pay

Pay is not stated in the ad.

Estimate take-home pay for a figure you enter

Estimated take-home pay

Explore gross pay after typical payroll taxes for a work location.

Gross salary (EUR) Enter the salary in the selected country's currency.Country City or area (optional)

Illustrative estimate only; assumes a standard employee profile and may omit benefits, pensions, credits and local rules. Regional and city-specific tax applies only where the selected calculator supports it; other results are country-level. Salary and location are sent only when you calculate: Paysums for supported regions, or WorthOf for wider country coverage. Confirm with an official payroll or tax source before making decisions.