Threat & Vulnerability Analyst Intern — Product Security

Roche; Sant Cugat del Vallès; Presencial; EUR 60.000 - 80.000; Jornada completa

Descripción de la vacante

Roche seeks a Threat & Vulnerability Analyst (Product Security) to safeguard healthcare software and devices. You will identify vulnerabilities, assess risk, and report findings to cross-functional partners across engineering and product teams.

You’ll drive automation for SBOM vulnerability management and explore AI-augmented approaches to scale security operations, while collaborating with product teams to prioritize remediation in development roadmaps and strengthen overall security posture.

Formación

• Experience in threat and vulnerability management, product security, application security, or software security analysis.
• Strong understanding of vulnerability scoring systems (CVSS), SBOM management, SCA, and common vulnerability frameworks (CVE/CWE).
• Automation or scripting experience (e.g., Python, Bash) and familiarity with CI/CD integrations.
• Ability to guide engineering teams through root-cause analysis and realistic fix prioritization.
• Excellent written and verbal communication skills with cross-functional influence.

Responsabilidades

• Perform end-to-end security assessments on product components and software stacks, identifying vulnerabilities and risk exposure.
• Contribute to automation of SBOM vulnerability management workflows and AI-augmented assessment frameworks.
• Translate complex vulnerabilities into clear, actionable risk reports for engineering and leadership teams.
• Collaborate with product teams to understand root causes and prioritize fixes within roadmaps.
• Track threat vectors, CVSS/NIST/OWASP standards to refine assessment criteria and tooling.

Conocimientos

Threat & Vulnerability Mgmt

SBOM management

SCA (Software Composition Analysis)

CVE/CWE knowledge

Automation scripting

Security reporting & communication

Herramientas

Python

CI/CD integrations

Descripción del empleo

Roche seeks a Threat & Vulnerability Analyst (Product Security) to safeguard healthcare software and devices. You will identify vulnerabilities, assess risk, and report findings to cross-functional partners across engineering and product teams.

You’ll drive automation for SBOM vulnerability management and explore AI-augmented approaches to scale security operations, while collaborating with product teams to prioritize remediation in development roadmaps and strengthen overall security posture.