Roche Posted August 8, 2026

Cybersecurity Engineer for Edge Defense (Cloud)

Madrid, Spain FULL_TIME
Information Technology

Roche is the source of truth for this posting and owns the application process. We surface normalized context and market comparison you won't find on the original listing.

About this opportunity

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Network Security product makes Roche’s connectivity accessible and secure through actionable, policy-driven processes. The capabilities we provide enable Roche to identify, inspect, and mitigate cloud-based risks, manage regulatory compliance, and oversee egress/ingress traffic across all layers. Our solutions are primarily instantiated through leading-edge security platforms and automated orchestration. We work closely with Cloud, Infrastructure, and Incident Response teams to provide enterprise visibility into Roche’s network security posture.

As a Cloud Security Engineer, you will be part of the Information Systems Security team at Roche. You will join a global team of 40 engineers with expertise spanning Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This is an incredible opportunity to jumpstart your career, learn from senior experts, and grow your skills in a world-class enterprise security environment.

Job description

In the role of Cloud Security Engineer, you will integrate into the Information Systems Security division at Roche. You will be part of a global collective of 40 technical specialists whose proficiency encompasses Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This position offers a premier chance to launch your professional journey, gaining insights from seasoned experts and refining your capabilities within a sophisticated enterprise security framework

Responsibilities

1. Architecture & Design

Collaboratively, develop and improve the security features and engineering capabilities for the Roche Cloud Platform (automatic deployment pipelines, secure controls and guardrails, abstraction layers to ease Cloud adoption, delegation capabilities to enable self-service functionality to end customers, etc.).

Contribute, based on Security Epics, to the Cloud SecDevOps Engineering team on technical implementations and decisions and provide software security architecture and insight for propositions, product designs and service enhancements.

2. Product Lifecycle & Evolution

Drive through all stages of the software development lifecycle, from requirements gathering and discussions with the Product Owner/Customer to the implementation and deployment of the security features, controls as code, and implement security policies and remediation processes using CI/CD.

Focuses on priorities, milestones and deliverables as per direction of the product management team and Security Requirements.

3. Operational Excellence & Visibility

Work with the Cloud SecDevops Engineering team to collaborate with stakeholders, customers, and external teams to improve Security posture of the Platform.

Be part of the technical solution team focusing on maintaining service since they are live by measuring and monitoring availability and overall system health and improving the reliability of the IT Infrastructure

Qualification

Education / Experience

Educational Background: Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related technical discipline, or equivalent foundational experience (e.g., intensive cloud/security training programs).

Professional Experience: 1+ years of foundational experience in IT security, cloud administration, or software development (strong academic projects or internships will also be considered).

Agile Methodology: Experience or familiarity working within an Agile/Scrum team structure.

Collaborative Environment: Proven ability to collaborate effectively with engineering or cross-functional product teams to solve technical challenges.

Technical Skills

AWS Cloud Infrastructure: Foundational, hands-on familiarity with core AWS services, specifically across computing, networking, storage, and databases.

Cloud Security Basics: Conceptual understanding or baseline exposure to AWS native security services such as GuardDuty and Security Hub.

Infrastructure as Code (IaC) & Scripting: Baseline working knowledge of Terraform for provisioning infrastructure and Python for automation scripting.

Version Control: Foundational knowledge of Git and standard Gitflow branching practices.

SDLC & CI/CD: Basic understanding of the software development lifecycle (SDLC) and how CI/CD pipelines function to deploy software or infrastructure.

Skills below will be considered a plus:

Cloud Networking experience with VPC subnets, Security Groups, Transit Gateway, Network Firewall.

Application Networking experience with AWS API Gateway, NLB/ALB.

Preferred to be certified AWS Architect Professional/DevOps or equivalent working knowledge on AWS environments,

Familiarity with Palo Alto Next-Generation Firewalls (NGFW)

Containers/serverless services knowledge.

Experience with modern tools in the Agile Software Development Life Cycle.

Experience on development workflow (i.e. JIRA).

Leadership Skills

Communication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.

Innovation & Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques.

Thriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high-level security requirements into functional network policies.

Self-Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle.

Additional Qualifications

Demonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques

Strong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks

Demonstrated interpersonal, collaborative and commitment to operational excellence skills.

 

 

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

Job details

Seniority
Not listed
Function
Information Technology
Therapeutic area
Not listed
Location
Madrid, Spain
Employment type
FULL_TIME

How this role compares

Computed from every other active Information Technology role in our database, not just this employer's listings.

We currently track 1097 comparable Information Technology roles across 55 biopharma companies.

1097Comparable roles tracked
1035Currently active
55Companies hiring similar roles
29Countries represented

Salary context

143 of 1097 peers report a salary range (USD, annualized)

Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.

This roleSubject Not listed on this posting
Lowest disclosed · Senior Data Security Engineer (Insider Risk Management – Engineering) · AbbVie $0/hr – $0/hr (≈ $0–$0/yr)
Highest disclosed · Senior Director, Targets and Mechanisms Solutions · Pfizer $230,900/yr – $384,800/yr
Peer group range $0 – $307,850 (median $165,900)

Where these roles are based

Top locations among the 1097 comparable roles

India507
United States241
Spain105
Poland72
Portugal32
China13

+ 23 more countries

Seniority mix

612 of 1097 peers have a known seniority level

Senior290
Manager135
Associate52
Principal50
Associate Director39
Director28
Senior Director13
Intern/Fellow/Postdoc4
Executive/VP1

Therapeutic area mix

1 of 1097 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden

Oncology1

Similar opportunities

The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.

40%similar
Roche Sant Cugat del Vallès, Barcelona, Spain
Same function Same country
40%similar
Roche Sant Cugat del Vallès, Barcelona, Spain Senior
Same function Same country
40%similar
Novartis Barcelona Gran Vía, Spain
Same function Same country
40%similar
Novartis Barcelona Gran Vía, Spain Associate Director
Same function Same country
40%similar
Novartis Barcelona Gran Vía, Spain Associate Director
Same function Same country
40%similar
Novartis Barcelona Gran Vía, Spain Associate Director
Same function Same country

How we calculate "similar"

No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.

Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.

40%
Lead Software Engineer (Rust)
Roche · Sant Cugat del Vallès, Barcelona, Spain · Seniority not listed
Function Therapeutic area Seniority Country
40%
Associate Director Business Analysis (GCO)
Novartis · Barcelona Gran Vía, Spain · Associate Director
Function Therapeutic area Seniority Country
40%
Snr. Specialist, Platform Services - Data, Digital & IT
Novartis · Barcelona Gran Vía, Spain · Seniority not listed
Function Therapeutic area Seniority Country
40%
Associate Director, Solution Design Expert (Advanced Therapies)
Novartis · Barcelona Gran Vía, Spain · Associate Director
Function Therapeutic area Seniority Country
Unmatched or unknown dimensions score exactly the same: 0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.