Senior Product Cybersecurity Analyst
We couldn't confirm this posting on Roche's site in our latest checks -- see current similar openings below.
About this opportunity
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The Position
Senior Product Cybersecurity Analyst
Responsibilities:
Proactively identify flaws in Roche’s product security, assess patient safety and business risk, and advise product managers on remediation steps.
Project & Stakeholder Leadership: Autonomously lead cybersecurity projects from inception to completion. Organize and facilitate cross-functional meetings with product teams, leading technical presentations and communicating remediation findings to internal stakeholders with minimal supervision.
Analyze log files, alerts, binary data dumps, network packet captures and other artifacts/evidence to trace attack paths during incident response and provide forensic expertise to determine root cause of the breach.
Drive security operations activities, prioritization and coordination of tasks during isolation, containment, analysis, and remediation of security incidents and breaches.
Conduct security monitoring, vulnerability scanning and other security testing activities.
Operations & Tool Management: Drive daily security operations activities, manage enterprise security tools like SIEM, and optimize operational efficiency across environments.
Gather Threat Intelligence to identify and prepare for cyber threats to Roche products and enhance security monitoring and breach detection. Leverage OSINT techniques to identify emerging cyber threats and enhance monitoring capabilities.
Provide expertise to answer inquiries, pre-sales requests, M&A, contract negotiations and other cybersecurity-related customer support
Is familiar with Firewall technologies and configurations.
Contribute to initiatives within the Diagnostic Division to achieve the integration of cybersecurity capabilities into products in collaboration with other multi-disciplinary teams.
Develop, document, and continuously refine operational playbooks, standard operating procedures, and automated response frameworks.
Maintain the product security controls and awareness supporting other PSPO Teams.
Support team members with less experience and provide guidance
Requirements:
Demonstrated experience in security operations, security testing, and incident response.
Hands-on experience managing and configuring Network Security controls (Firewalls, IDS/IPS) and SIEM solutions.
Demonstrated experience automating security controls (eg. shell scripting, python)
In-depth experience in managing information security and privacy risks and threat modeling.
In-depth experience in system and cloud infrastructure hardening and monitoring
In-depth understanding of threat modeling, MITRE Attack, Kill Chain Analysis and other industry standard assessment methods
In-depth specialist knowledge in one of the following or related fields: Malware analysis and reverse engineering
Incident response and computer forensic analysis
Endpoint detection and response (EDR/XDR)
SIEM solutions administration and security monitoring
Network security and monitoring including Firewalls and IDS/IPS solutions
Threat Intelligence
Qualifications:
5+ years of relevant operational cybersecurity experience (or a combination of a BS/MS degree in Computer Science, Information Technology, or a related field plus equivalent experience).
Relevant professional certifications are a plus (e.g., AWS Certified Security, CISSP, GSEC, GCIH, Network+ / Security+).
Who we are
A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let’s build a healthier future, together.
Roche is an Equal Opportunity Employer.
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 599 comparable Senior Information Technology roles across 60 biopharma companies.
Salary context
103 of 599 peers report a salary range (USD, annualized)
Peers share this role's job function and a matching or adjacent seniority level -- not necessarily the same therapeutic area or country.
Where these roles are based
Top locations among the 599 comparable roles
+ 27 more countries
Seniority mix
599 of 599 peers have a known seniority level
Therapeutic area mix
4 of 599 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Currently open similar roles
This posting is closed, but here are live openings closest to it -- ranked by similarity, not by how well you'd qualify for them.
Notify me about similar jobs
Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.
Or follow a whole field: get every new Information Technology job in Spain, and choose locations and companies.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.