Product Security Lead — Threat Intel & Incident Response

F. Hoffmann-La Roche AG; Sant Cugat del Vallès; On-site; EUR 90,000 - 130,000; Full time

Job summary

Roche seeks a Senior Product Cybersecurity Analyst in Spain to proactively identify flaws in product security and advise product managers on remediation steps.

You will lead cybersecurity projects end-to-end, organize cross-functional meetings, and communicate remediation findings with minimal supervision. The role emphasizes threat modeling, incident response, and continuous security improvements across Roche products.

Qualifications

• 5+ years of relevant operational cybersecurity experience or equivalent
• Certifications in security desirable (e.g., CISSP, GSEC)

Responsibilities

• Identify security flaws in Roche products and assess patient safety risk
• Lead cybersecurity projects end-to-end with cross-functional teams
• Analyze logs, alerts and data to trace attack paths during incidents
• Drive security operations and tool management across environments
• Conduct security monitoring, vulnerability scans and testing activities
• Provide security expertise for inquiries, pre-sales, M&A and contracts
• Maintain product security controls and contribute to playbooks and SOPs

Skills

Security operations

Incident response

Security testing

Network security

SIEM

Firewall/IDS/IPS

Scripting (Python)

Threat modeling

MITRE ATT&CK

EDR/XDR

Education

BS/MS in Computer Science/IT or related

Tools

SIEM

Firewalls

IDS/IPS

Cloud security tools

Job description

Roche seeks a Senior Product Cybersecurity Analyst in Spain to proactively identify flaws in product security and advise product managers on remediation steps.

You will lead cybersecurity projects end-to-end, organize cross-functional meetings, and communicate remediation findings with minimal supervision. The role emphasizes threat modeling, incident response, and continuous security improvements across Roche products.