1,630,794open jobs
97,890companies
249,683added this week
Browse all
Salary
≈ $49k – $114k per year (Estimated)
Location
In office (Madrid)
Seniority
Senior · 7+ years exp
Employment
Full-Time

Confirmed on the employer's own hiring board on Oct 14, 2026. First seen by Alion on Aug 3, 2026. Roche scores A on the Alion truth index.

Overview
Company
Impact
Profile match
Roche is a Swiss healthcare group founded in Basel in 1896 and is unusual in operating two large divisions of comparable importance: prescription medicines and in vitro diagnostics. The pharmaceutical business is built on oncology, neurology, immunology, ophthalmology and haemophilia, with products such as Ocrevus, Hemlibra, Perjeta and Vabysmo, while the diagnostics division supplies laboratory analysers, molecular tests and sequencing systems to hospitals worldwide. The group owns the American biotechnology company Genentech outright and the Japanese firm Chugai in majority, is controlled by a family shareholder pool, and spends among the largest research budgets in the industry.

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Expert Security Engineer is a cornerstone of Roche’s defense, spearheading the protection of critical manufacturing systems and networks against an evolving landscape of sophisticated cybersecurity threats. You will provide expert-level architecture and engineering leadership, empowering system owners to fortify their environments in strict alignment with global standards and industry-leading best practices. Your strategic contributions will include:

  • Leading technical design reviews, integration, and testing to ensure security-by-design for all new and existing OT infrastructure.

  • Architecting global Manufacturing Cybersecurity standards and acting as a primary OT Cybersecurity Advisor during mission-critical system planning and risk assessments.

  • Leveraging secure, corporate-compliant AI accelerators and enterprise-ready platforms to automate routine log analysis, scripting, and threat modeling, effectively minimizing defensive response times against machine-speed cyber threats.

  • Providing authoritative guidance to System Owners on risk-mitigation strategies and complex security control selection.

  • Orchestrating high-value OT services and vendor-delivered activities to maintain a seamless, secure operational posture.

  • Vetting technical designs for ServiceNow Manufacturing Cybersecurity Requests to ensure enterprise-wide compliance.

  • Engineering and optimizing next-generation Industrial Intrusion Detection Systems (IIDS) for real-time site monitoring.

  • Leading technical incident response, driving forensic investigations, and executing containment strategies to mitigate breach impact.

  • Catalyzing cross-site collaboration by partnering with Cybersecurity Site Representatives to harmonize global security initiatives.

Job Responsibilities

You will be a key pillar of the Manufacturing Cybersecurity Engineering team, reporting to the Head of Manufacturing Cybersecurity Engineering within Roche’s global Information Security subfunction. In this capacity, you will:

  • Execute end-to-end security analysis across diverse capabilities, tackling the organization's most complex technical challenges.

  • Champion the professional development of the team by mentoring junior engineers and defining the "gold standard" for security practices.

Stakeholder Management

  • Cultivate high-trust relationships with executive and technical stakeholders, serving as a strategic advisor on manufacturing risk.

  • Drive stakeholder engagement for complex initiatives, proactively shaping perspectives to ensure security is a business enabler

Impact/Strategy

  • Deliver measurable security improvements across product clusters, ensuring all strategic plans align with broader Roche business goals.

  • Transform high-level requirements into scalable implementation frameworks that future-proof our manufacturing environments.

Complexity

  • Orchestrates business analysis and strategic oversight across highly complex, cross-functional project portfolios and multi-product domains.

  • Navigates ambiguity to define clear project trajectories, manages intricate stakeholder ecosystems, and evaluates the cascading long-term implications of critical architectural and security decisions.

Business/Technical ability

  • Commands a deep, holistic understanding of the business domain, associated technology stacks, and their complex interdependencies.

  • Independently synthesizes advanced tools, principles, and methodologies for requirements, data, usability, and process analysis to engineer solutions that maximize operational efficiency, security posture, and systemic effectiveness.

Qualifications

Education / Experience

  • Proven expertise in architecting and leading end-to-end security analysis strategies and orchestrating the response to high-complexity cybersecurity incidents and systemic vulnerabilities.

  • Distinguished ability to command high-level relationships with a diverse ecosystem of executive and cross-functional stakeholders, serving as a primary Strategic Advisor on enterprise-scale engagements.

  • Exceptional track record of driving organizational accountability through visible leadership, including serving as a Lead for global security incidents and a project owner for mission-critical security initiatives.

  • A Bachelor’s degree in Computing Engineering, Automation Engineering, or a related technical discipline.

Technical Skills

  • Extensive professional tenure with a minimum of 7-10 years of senior-level within the IT Security domain.

  • Authoritative knowledge of global manufacturing and automation standards, coupled with deep insights into local industrial systems, is highly regarded.

  • Commanding mastery of advanced tools, methodologies, and architectural principles for the analysis of complex requirements, data structures, and systemic processes.

  • Expertise in evaluating emerging technology landscapes to engineer and propose strategically aligned, future-proof cybersecurity solutions and defensive controls.

Additional Qualifications

The following advanced competencies are highly valued:

Security Domain Expertise

  • Strategic mastery of cybersecurity defense-in-depth principles, including advanced network segmentation, real-time security monitoring, and complex incident response orchestration within OT environments.

  • Expertise in deploying enterprise-grade endpoint security and Industrial Intrusion Detection Systems (IIDS), including file integrity monitoring and sophisticated anti-malware protections.

  • Authoritative knowledge of industrial risk assessment methodologies and the engineering of robust disaster recovery and forensic investigation frameworks.

Architecture & Infrastructure

  • Proven ability to design and vet highly secure, scalable architectures for global networks, industrial systems, and mission-critical applications.

  • Advanced command of low-level networking protocols (TCP/IP) and the secure integration of IT/OT infrastructure, including PLC protection and secure remote access.

  • Deep institutional knowledge of Roche IT Security Standards and global service deployment models to ensure enterprise-wide harmonization.

Technical Proficiency

  • Strategic insight into emerging threat landscapes, including the evolution of hacking techniques and the engineering of proactive defensive controls.

  • Proficiency in leveraging automation and scripting (Python, PowerShell, Bash) and core development languages (Java, .Net, C++) to optimize security operations.

Certifications

  • Possession of industry-recognized certifications such as CISSP, GICSP, ISA/IEC 62443 Specialist, CEH, or Security+, reflecting a commitment to professional excellence.

  • Solid knowledge on IT infrastructure and service deployment model within Roche

  • Strong knowledge of the Roche IT Security Standards

We support a flexible work environment with an expectation of working from the office approximately 40% of the time (typically two days per week Office presence required).

Please note that relocation assistance is not provided for this position; candidates must already be authorized to work and live within commuting distance.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,630,794 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Madrid
≈ $52k – $122k per year (Estimated) • Hybrid • Full-Time • 5+ years exp • Barcelona
AI/ML
AI Agents
LLM
DevOps
CI/CD
Kubernetes
Cybersecurity
Burp Suite
Metasploit
Apply
≈ $38k – $93k per year (Estimated) • Hybrid • Full-Time • 4+ years exp • Barcelona
AI/ML
AI Agents
LLM
DevOps
CI/CD
Kubernetes
Cybersecurity
Burp Suite
Metasploit
Apply
≈ $29k – $83k per year (Estimated) • Equity • Hybrid • 2+ years exp • Barcelona
Python
PowerShell
Bash
DevOps
Azure
AWS
Linux
Windows
DNS
Cybersecurity
SIEM
Apply
$70k – $90k per year • Hybrid • Full-Time • Vilnius
DevOps
Azure
Cybersecurity
ISO 27001
Apply
Vulnerability Analyst 4 hours ago
≈ $45k – $89k per year (Estimated) • In office • Full-Time • 2+ years exp • Shirebrook
Cybersecurity
MITRE ATT&CK
CVSS
Apply
≈ $64k – $139k per year (Estimated) • In office • Full-Time • Hamburg
Python
Java
C++
Bash
DevOps
Linux
Apply
≈ $14k – $32k per year (Estimated) • Hybrid • Full-Time • Novosibirsk
Python
SQL
Bash
Databases
PostgreSQL
RabbitMQ
MS SQL
Apache Kafka
DevOps
Terraform
Ansible
Zabbix
Prometheus
Yandex Cloud
GitLab CI
HAProxy
CI/CD
GitOps
Jenkins
Nginx
Grafana
SLI/SLO/SLA
Linux
Windows
TCP/IP
DNS
VPN
Apply
≈ $29k – $59k per year (Estimated) • Remote (EAEU) • Bachelor's Degree • Moscow
Python
Python
FastAPI
Django
Databases
PostgreSQL
Redis
Apache Kafka
AI/ML
NLP
LLM
DevOps
Rest API
gRPC
CI/CD
Git
Docker
Kubernetes
Linux
Management
Kanban
Apply
≈ $16k – $37k per year (Estimated) • Remote (EAEU) • Bachelor's Degree • Moscow
Python
SQL
Management
Google Sheets
Apply
In office • Full-Time • PhD • Singapore
Python
AI/ML
Reinforcement Learning
Multimodal AI
PyTorch
Vision-Language-Action
Embodied AI
Robotics
Motion Planning
Reinforcement Learning
Apply
≈ $48k – $114k per year (Estimated) • In office • Full-Time • 5+ years exp • Bachelor's Degree • Madrid
Python
JavaScript
Rust
DevOps
IAM
Linux
Windows
Cybersecurity
Zero Trust
Active Directory
Apply
PAM - Cyberark SME 1 month ago
≈ $41k – $109k per year (Estimated) • In office • Full-Time • Bachelor's Degree • Madrid
Python
PowerShell
DevOps
Ansible
GCP
Azure
CI/CD
AWS
Docker
Incident Management
IAM
Cybersecurity
CyberArk
HashiCorp Vault
Zero Trust
OWASP
Management
Agile
ITIL
Apply
≈ $36k – $86k per year (Estimated) • In office • Full-Time • 4+ years exp • Bachelor's Degree • Madrid
PowerShell
DevOps
Incident Management
Cybersecurity
Microsoft Entra ID
Active Directory
LDAP
Chips/EDA
PoC Library
Management
ITIL
Apply
≈ $56k – $134k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • Madrid
Management
Agile
Apply
≈ $47k – $111k per year (Estimated) • In office • Full-Time • 6+ years exp • Bachelor's Degree • Madrid
PowerShell
DevOps
Incident Management
Cybersecurity
Microsoft Entra ID
Active Directory
LDAP
Chips/EDA
PoC Library
Management
ITIL
Apply
≈ $57k – $135k per year (Estimated) • In office • Full-Time • Madrid
Python
PowerShell
Databases
Apache Kafka
DevOps
Terraform
GCP
VMWare
Azure
CI/CD
Git
Docker
Kubernetes
Bicep
Azure AKS
Analytics
ETL/ELT
Apache NiFi
Management
Agile
Apply
≈ $51k – $120k per year (Estimated) • Hybrid • Full-Time • 5+ years exp • Madrid
Python
PowerShell
Bash
DevOps
Rest API
SLI/SLO/SLA
IAM
Windows
Cybersecurity
ISO 27001
SOC 2
Zero Trust
Microsoft Entra ID
DLP
Apply
≈ $40k – $85k per year (Estimated) • In office • Full-Time • 4+ years exp • Bachelor's Degree • Rotterdam • Madrid
Apply
≈ $26k – $65k per year (Estimated) • In office • Madrid
Apply
Hybrid • Madrid
Apply
See all jobs
This is one of many
1,630,794 more open roles from verified company boards, updated every day.