Roche Posted September 16, 2026

Cybersecurity Engineer - Monitoring & Incident Response

Madrid, Spain FULL_TIME
Notify me about similar jobs

Roche is the source of truth for this posting and owns the application process. We surface normalized context and market comparison you won't find on the original listing.

About this opportunity

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a Cybersecurity Engineer, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users. Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources. All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. Cybersecurity are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems.

As a member of the Incident Response Enablement team, you are encouraged to support on-call rotation during weekends, and will be mobilized during major incidents.

Job Responsibilities

Monitoring and Incident Response for a global environment

Elicit feedback and obtain data to continuously strengthen detection and response processes

Be a force of proposition to steer continuous improvement efforts, partnering with other teams within the Cybersecurity space

Enhance the platforms and automations that empower detection, investigation and response

Drive remediation efforts by turning investigations and lessons learned into structural improvements across the company, partnering with other experts across the Roche group

Brief peers and leadership on threats relevant to the Roche group

Communicate information security concepts and situations to senior management

Organize structured knowledge exchange sessions with partners and peers

Mentor team members

Qualifications

Education / Experience / Technical Skills

Bachelor’s degree in a technical field and 5+ years of experience in information security, including at least 3 years in a SOC/CERT/CSIRT environment

Ability to design and implement complex security systems and processes to strengthen Roche’s posture

Familiarity with TLP and information sharing best practices

Ability to communicate information security-related concepts and situations to a non-technical audience

Demonstrated ability to analyze, triage, and escalate information security incidents

Ability to take decisions, often under pressure and given partial information

Knowledge of detection engineering and threat-hunting concepts

Scripting and programming skills (Python, Javascript, Go, Rust)

Demonstrated knowledge of operating systems (Windows, Linux, macOs )

Experience in Cloud security for major providers

Excellent organization and communication skills

Attention to detail

Fluent spoken and written English

Additional Qualifications

Network and Endpoint security monitoring experience in a large complex environment

Knowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, …)

Experience designing/building/improving logging, monitoring and detection pipelines

Capacity to identify vulnerabilities, propose pragmatic hardening measures, and influence platform or development teams

Familiarity with various defensive AND offensive security toolsets

A passion for the field of computer and network security

 

 

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

Job details

Seniority
Not listed
Function
Information Technology
Therapeutic area
Not listed
Location
Madrid, Spain
Employment type
FULL_TIME

How this role compares

Computed from every other active Information Technology role in our database, not just this employer's listings.

We currently track 1167 comparable Information Technology roles across 74 biopharma companies.

1167Comparable roles tracked
1083Currently active
74Companies hiring similar roles
35Countries represented

Salary context

162 of 1167 peers report a salary range (USD, annualized)

Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.

This roleSubject Not listed on this posting
Lowest disclosed · 2027 Business Technology Solutions Intern - Cybersecurity (Undergraduate) · AbbVie $21/hr – $37/hr (≈ $43,680–$76,960/yr)
Peer group range $60,320 – $400,000 (median $185,000)

Where these roles are based

Top locations among the 1167 comparable roles

India488
United States310
Spain89
Poland71
Portugal22
China17

+ 29 more countries

Seniority mix

667 of 1167 peers have a known seniority level

Senior272
Manager143
Principal67
Associate Director55
Associate49
Director41
Intern/Fellow/Postdoc21
Senior Director13
Executive/VP6

Therapeutic area mix

2 of 1167 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden

Oncology1
Vaccines & Infectious Disease1

Similar opportunities

The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.

40%similar
Roche Sant Cugat del Vallès, Barcelona, Spain
Same function Same country
40%similar
Novartis Barcelona Gran Vía, Spain
Same function Same country
40%similar
Roche Madrid, Spain Manager
Same function Same country
40%similar
Roche Madrid, Spain Senior
Same function Same country
40%similar
Roche Madrid, Spain
Same function Same country
40%similar
Roche Madrid, Spain Senior
Same function Same country

Notify me about similar jobs

Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.

How we calculate "similar"

No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.

Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.

40%
Lead Software Engineer (Rust)
Roche · Sant Cugat del Vallès, Barcelona, Spain · Seniority not listed
Function Therapeutic area Seniority Country
40%
Senior SAP Cloud Engineer
Roche · Madrid, Spain · Senior
Function Therapeutic area Seniority Country
40%
IT Business Analyst - Omnichannel Orchestration - RDT Global Products & GPS
Roche · Madrid, Spain · Seniority not listed
Function Therapeutic area Seniority Country
40%
Domain Architect - Site & Services
Roche · Madrid, Spain · Seniority not listed
Function Therapeutic area Seniority Country
Unmatched or unknown dimensions score exactly the same: 0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.