Penetration Tester: Secure Next-Gen Healthcare Tech

Roche; Sant Cugat del Vallès; On-site; EUR 55,000 - 75,000; Full time

Job summary

Roche is seeking a Cybersecurity Penetration Tester to join the Product Security & Privacy Organization. You will perform vulnerability assessments and hands‑on penetration tests across Roche’s digital solutions, cloud apps, and medical devices, and collaborate with engineering to prioritize fixes.

You’ll support security by design, help expand testing methodologies, and contribute to incident response and red team exercises, leveraging your knowledge of OWASP Top 10 and SDLC to strengthen

Qualifications

• 2+ years of penetration testing experience.
• Bachelor’s degree in Computer Science or related field.
• Strong knowledge of OWASP Top 10 and SDLC.
• Experience with incident response and forensics is a plus.
• Ability to communicate vulnerabilities to technical and non-technical stakeholders.
• Automation using Python or shell scripting.

Responsibilities

• Conduct and participate in penetration testing across digital solutions, cloud apps, and medical devices.
• Identify vulnerabilities and triage fixes with product teams throughout the lifecycle.
• Provide security input during design and development to ensure security by design.
• Maintain testing methods and tools repository for reuse across the business.
• Support Incident Response with technical analysis and forensics during incidents.
• Lead red team exercises to assess resilience and report findings.

Skills

Penetration testing

Vulnerability assessment

Python scripting

Shell scripting

Incident response

Communication

Team leadership

Security by design

OWASP Top 10

SDLC

Education

Bachelor’s degree in Computer Science or related field

SANS GIAC certifications (GCIH, GPEN, GCIA, GCFA)

OSCP or similar offensive security cert

CEH

CISSP

CISA

CISM

ISO27001 Lead Auditor

Job description

Roche is seeking a Cybersecurity Penetration Tester to join the Product Security & Privacy Organization. You will perform vulnerability assessments and hands‑on penetration tests across Roche’s digital solutions, cloud apps, and medical devices, and collaborate with engineering to prioritize fixes.

You’ll support security by design, help expand testing methodologies, and contribute to incident response and red team exercises, leveraging your knowledge of OWASP Top 10 and SDLC to strengthen