Senior DevSecOps Engineer & Security Architect

F. Hoffmann-La Roche AG; Madrid; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

Roche is seeking an Expert DevSecOps Engineer to bridge software development with security engineering. You will design robust security frameworks, handle complex requirements, and mentor engineers while guiding long-term software security architectures with the Embedded Security & Testing Team.

You will drive best practices in Threat Modelling, SAST, SCA, IaC scanning, and container security, collaborating with area architects to deliver secure, scalable software across business areas.

Formación

• Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related technical field; or equivalent practical experience.
• Minimum of 8-10+ years of progressive experience in DevSecOps, with 3+ years building DevSecOps frameworks from scratch.
• Hands-on, tools-agnostic expert on DevSecOps enablement tools to support product and application teams across SDLC.

Responsabilidades

• Provide expert-level leadership in DevSecOps, including threat modelling, code quality, SAST, SCA, container scanning, and IaC scanning.
• Lead DevSecOps efforts on strategic activities and guide less experienced members.
• Analyze complex problems, define problem space, and drive root cause analysis across boundaries.
• Build strong stakeholder relationships, influence decisions, and align with enterprise standards.
• Mentor colleagues and contribute to Communities of Practice; balance security with fast software delivery.

Conocimientos

Analytical Thinking

Navigating Ambiguity

Strategic Influencing

Systems Thinking

Educación

Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related technical field

Herramientas

SonarQube

GHAS

Sysdig

Snyk

IriusRisk

JFrog Xray

NowSecure

Descripción del empleo

Roche is seeking an Expert DevSecOps Engineer to bridge software development with security engineering. You will design robust security frameworks, handle complex requirements, and mentor engineers while guiding long-term software security architectures with the Embedded Security & Testing Team.

You will drive best practices in Threat Modelling, SAST, SCA, IaC scanning, and container security, collaborating with area architects to deliver secure, scalable software across business areas.