Product Cybersecurity Expert

F. Hoffmann-La Roche Gruppe; Sant Cugat del Vallès; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

A leading global healthcare company is looking for a skilled Security Engineer to define security requirements and manage vulnerabilities for their products. The ideal candidate will have over 7 years of experience in security operations and a background in engineering or computer science. This role emphasizes collaboration across international teams to mitigate security risks and enhance product safety. Roche offers a dynamic environment to grow and innovate for a healthier future.

Formación

• Minimum of 7+ years of related work experience in security engineering or operations.
• Demonstrated experience in product software development and cloud platform teams.
• In-depth experience analyzing product security posture and risk landscape.

Responsabilidades

• Define security and privacy requirements for Roche products during development.
• Support implementation of security and privacy risk management framework.
• Manage vulnerabilities throughout the product lifecycle.

Conocimientos

Security engineering

Vulnerability management

Application security

Cross-cultural collaboration

Educación

BA/BS in Engineering or Computer Science

Herramientas

SANS GIAC

CEH

CISSP

CISA

Descripción del empleo

The Position

Who We Are

A healthier future. It’s what drives us to innovate. To continuously advance science and ensure everyone has access to the healthcare they need today and for generations to come. Creating a world where we all have more time with the people we love. That’s what makes us Roche.

The role

Data security and privacy are key success factors in our digital transformation and essential to reach our ambitions. You are inspired to give to the overall Roche Diagnostics vision by applying end-to-end Division-wide product security and privacy operations to keep our products and services secure and privacy compliant throughout the entire lifecycle. You believe in the potential of science, technology, data and insights to improve the standard of care for humankind and you are eager to help navigate through unchartered territory to lift this potential.

Responsibilities

• Defining security and privacy requirements for Roche products, medical devices or health/clinical solutions both in the cloud and on-premises during all product software development lifecycle.
• Contributing to the development and support implementation of security and privacy risk management framework across the product lifecycle.
• Supporting in the definition, implementation and maintenance of product security and privacy control measures for a product or platform, considering changes in technology, regulations and customer needs.
• Managing vulnerabilities at all technology layers during pre and post market activities of the product or platform, making sure they are fixed in a timely manner.
• Supporting the security testing activities (SCA, SAST, DAST, IAC, etc.) for a given product, helping to automate execution and deliverables and support on the remediation activities.
• Conducting planning and coordination of external security testing activities (verification & validation) and remediation plans (e.g. pentest).
• Supporting security incident response and forensic activities working directly with the Roche Intelligence and Defense teams.

Who you are

• BA/BS in Engineering, Computer Science or relevant area of study required.
• Security industry certifications such as SANS GIAC (GCIH, GPEN, GCIA, GCFA, etc.), CEH, CISSP, CSSP, CISA, etc.
• Minimum of 7+ years of related work experience in security engineering, security operations, vulnerability management or application security.
• Demonstrated experience working with product software development and cloud platform teams, preferably in international companies in the healthcare or regulated industries.
• In-depth experience in analyzing product security posture, threat and risk landscape, performing threat modeling and defining adequate security and data privacy controls to mitigate risks.
• Excellent interpersonal skills with high cross-cultural sensitivity; ability to collaborate and communicate across multiple international teams; commitment to working as a team player across Business Areas and Divisions.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.