{"id":3523837,"url":"https://alion.io/job/roche-senior-principal-cybersecurity-engineer","title":"Senior Principal Cybersecurity Engineer","company":{"id":13531,"name":"Roche","domain":"roche.com","url":"https://alion.io/company/roche","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":224,"ghost_share":0.04,"stale_share":0.612,"repost_share":0.098,"time_to_fill_p50_days":19,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rotkreuz, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":281000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Verification & Validation","optional":false}],"status":"live","first_seen_at":"2026-10-30T13:19:45Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-10-31T18:29:05Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.\nThe Position\nData security and privacy are key success factors in our digital transformation and essential to reach our ambitions. You are inspired to contribute to the overall Roche Diagnostics vision by applying end-to-end Division-wide product security and privacy operations to keep our products and services secure and privacy compliant throughout the entire lifecycle. You believe in the potential of science, technology, data, and insights to improve the standard of care for humankind, and you are eager to help navigate through uncharted territory to lift this potential.\nThe Opportunity:\n Define robust security and privacy baselines: Establish comprehensive security and privacy requirements for Roche medical devices, health/clinical solutions, and cloud or on-premises products across the entire Software Development Lifecycle (SDLC).\nChampion risk management frameworks: Contribute to the development and implementation of the product lifecycle security and privacy risk management framework, integrating changes in technology, customer needs, and global regulations.\nLead threat modeling and risk evaluations: Perform threat modeling and cybersecurity risk management assessments to actively safeguard patient safety, customer property, and critical business continuity.\nDrive proactive vulnerability management: Oversee pre- and post-market vulnerability handling across all technology layers, ensuring timely remediation and alignment across relevant platforms.\n Assess and mitigate testing outcomes: Evaluate risks identified through security testing activities (including SAST, DAST, SCA, IaC, and penetration testing) and steer direct remediation activities with engineering teams.\n Coordinate independent validations and incident response: Plan and coordinate external security verification and validation (such as penetration tests) while supporting security incident response and forensic activities in direct partnership with Roche Intelligence and Defense teams.\nMaintain regulatory compliance documentation: Author and maintain high-quality internal and external compliance documentation, playbooks, and standardized tools for audit-readiness and quality excellence.\nEscalate and steer strategic capabilities: Present clear risk evaluations, impacts, and mitigation proposals to executive risk committees, while leading strategic cross-functional initiatives that elevate Division-wide product security.\nWho you are:\n Education: Bachelor’s degree in Engineering, Computer Science, or a related discipline (Master's or PhD preferred).\n Years of Experience: BS with 12+ years of relevant experience in similar roles (with a minimum of 7+ years in security engineering, security operations, vulnerability management, or application security), OR MS with 8+ years of relevant experience in similar roles, OR PhD with 4+ years of relevant experience in similar roles.\nTechnical & Platform Expertise: Demonstrated track record working alongside product software development and cloud platform teams, ideally within international healthcare or highly regulated sectors.\nAssessment & Threat Modeling Mastery: In-depth proficiency in threat modeling, product security posture analysis, and deploying privacy controls to mitigate enterprise and clinical risks.\n Regulatory & Industry Standards: Comprehensive knowledge of industry standards and regulatory frameworks (ISO 27000 family, FDA Guidances, MDCG, HITRUST, GDPR, and CPRA); hands-on familiarity with global medical device submissions (e.g., FDA, CE Mark, NMPA) is strongly recommended.\n Certifications & Leadership: Relevant professional security certifications (such as CISSP, CSSP, CISM, CISA, CEH, SANS GIAC, or ISO 27001 Lead Auditor); proven ability to mentor, coach chapters, and build security champion networks across departments.\n Communication & Mobility: Fluency in English (verbal and written) with strong stakeholder-influencing capabilities across global, cross-cultural teams; German proficiency is a plus. Willingness to travel up to a maximum of 20%.\nCall to Action:\nReady to bring your unique qualities to Roche and make an impact? Apply now and join us in our mission to shape the future of healthcare.\nWho we are\nA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.\nLet’s build a healthier future, together.\nRoche is an Equal Opportunity Employer.","description_format":"text","description_chars":5284,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":true},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Biologics & Biosimilars","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-30T13:19:45Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/roche-senior-principal-cybersecurity-engineer","json_url":"https://alion.io/job/roche-senior-principal-cybersecurity-engineer.json","meta":{"generated_at":"2026-11-01T01:09:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1867,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13531},"rest":"https://alion.io/mcp/rest/get_company?id=13531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froche-senior-principal-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froche-senior-principal-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froche-senior-principal-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/roche-senior-principal-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froche-senior-principal-cybersecurity-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3523837}},{"tool":"search_jobs","arguments":{"company":"roche.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3523837},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}