{"id":3674400,"url":"https://alion.io/job/roche-penetration-tester","title":"Penetration Tester","company":{"id":13531,"name":"Roche","domain":"roche.com","url":"https://alion.io/company/roche","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":204,"ghost_share":0.044,"stale_share":0.618,"repost_share":0.113,"time_to_fill_p50_days":20,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sant Cugat del Vallès, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-11-03T10:16:53Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-03T18:38:23Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.\nThe Position\nCybersecurity Penetration Tester\nWe advance science so that we all have more time with the people we love.\nWho We Are\nAt Roche, we are passionate about transforming patients’ lives through innovation.\nWe act boldly - because we believe that good business means a better world. Every day, we commit to scientific rigor, unshakable ethics, and broad access to medical breakthroughs. Together, we’re building a better tomorrow, today.\nWe’re also deeply committed to diversity, equity, and inclusion. By bringing together people with a wide range of backgrounds, perspectives, and skills, we create an environment where innovation thrives, creativity flourishes, and everyone belongs.\nThe Opportunity\nWe’re looking for a Penetration Tester to join our Product Security & Privacy Organization (PSPO) - a dynamic global team ensuring the resilience and trustworthiness of Roche’s products and digital solutions.\nIn this hands-on role, you’ll execute vulnerability assessments and penetration testing activities across our physical and cloud-based products under the guidance of senior team members. You’ll collaborate with engineering, product, and architecture teams to strengthen Roche’s cyber defenses and ensure that innovation in diagnostics goes hand in hand with security and patient safety.\nYour work will directly influence the security of next-generation healthcare technologies used worldwide.\nWhat You’ll Do\nConduct and participate in penetration testing activities across our diverse product portfolio, including digital solutions, cloud applications, and medical devices.\nProactively identify and assess vulnerabilities, and collaborate with product teams to prioritize and fix them throughout the product lifecycle.\nProvide technical support and security knowledge to product teams during the design and development phases to ensure security by design.\nCollaborate with the team to contribute to, utilize, and help maintain the central repository of testing methods and tools, supporting our goal of reusability across the business.\nSupport the Incident Response team with technical analysis and forensics during security incidents.\nExecute red team exercises to assess product and solution resilience.\nPrepare and present clear security reports with risk assessments and actionable recommendations.\nContribute to integrating defense and security-by-design principles across product lines.\nContinuously optimize processes, playbooks, and tools for scalable product security.\nLeverage AI-assisted security tools and emerging technologies to enhance the efficiency, scope, and coverage of vulnerability assessments.\nWho You Are (Required)\nYou are a technically strong, curious, and impact-driven professional who thrives in complex, fast-moving environments. You enjoy uncovering vulnerabilities and turning insights into stronger, safer products.\nYour profile includes:\nProven experience (2+ years) leading and executing penetration testing across web applications, APIs, cloud environments, and/or embedded devices; or demonstrated expert-level offensive skills acquired in a highly specialized security domain.\nBachelor’s degree in Computer Science, Information Systems, or a related field preferred.\nSolid Background in vulnerability assessment and penetration testing.\nSolid knowledge of common attack vectors, security best practices (e.g., OWASP Top 10), and Secure Development Lifecycle (SDLC) methodologies.\nExperience automating security controls (e.g., shell scripting, Python).\nIn-depth understanding of information security and privacy risks.\nExperience with incident response and forensics (a plus).\nStrong ability to communicate complex vulnerabilities, their impact, and required mitigation steps clearly to technical and non-technical stakeholders.\nStrong problem-solving, communication, teamwork, and leadership skills.\nProactive, collaborative, and self-driven, focused on continuous learning and sharing knowledge within a diverse global team.\nProactive, self-driven, hands-on, and solution-oriented mindset.\nRelevant industry certifications such as SANS GIAC (GCIH, GPEN, GCIA, GCFA), OSCP, OSEP, CEH, eJPT, CISSP, CISA, CISM, or ISO27001 Lead Auditor are highly valued.\nKnowledge of or keen interest in emerging AI technologies, including Large Language Models (LLMs) vulnerabilities and the basic concepts of offensive agentic AI.\nYou share Roche’s core values: Customer Empathy, Trust, Ownership, Bias for Action, Curiosity, Optimism, Collaboration, and Data-driven Decision-Making.\nWhy Join Us?\nThis is more than a job - it’s an opportunity to shape the future of healthcare technology, strengthen the security of life-saving solutions, and directly protect patient trust.\nAt Roche, your expertise matters every day. You’ll collaborate with world-class teams, tackle meaningful challenges, and grow in a global environment that values learning, integrity, and innovation.\nTogether, we make technology safe for better health - everywhere.\nReady to Secure What’s Next?\nJoin us and help redefine how security powers trust in healthcare.\nApply now and be part of the team protecting the future of diagnostics.\nThere is a preferred candidate identified.\nWho we are\nA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.\nLet’s build a healthier future, together.\nRoche is an Equal Opportunity Employer.","description_format":"text","description_chars":6281,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Diagnostic Tests & IVD","Biologics & Biosimilars","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-11-03T10:16:53Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":20,"reasons":["conf:4","win:early","comp:junior,brand"],"computed_at":"2026-11-03T23:15:02Z"},"pay":null,"html_url":"https://alion.io/job/roche-penetration-tester","json_url":"https://alion.io/job/roche-penetration-tester.json","meta":{"generated_at":"2026-11-03T23:15:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1859,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13531},"rest":"https://alion.io/mcp/rest/get_company?id=13531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froche-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froche-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froche-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/roche-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froche-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3674400}},{"tool":"search_jobs","arguments":{"company":"roche.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3674400},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}