Cybersecurity Engineer: Vulnerability & Exposure

Roche Holding AG; Petaling Jaya; On-site; MYR 368,000 - 613,000; Full time

Job summary

Roche Holding AG is seeking a Security Engineer within the MIR team to protect networks, systems, and users from evolving cyber threats. You will identify, assess, prioritize, and reduce cybersecurity risks across Roche’s global environment.

Join a collaborative, highly technical cybersecurity team that values innovation, curiosity, continuous learning, and proactive risk reduction. You will engineer automation and remediation workflows to strengthen Roche’s security posture.

Qualifications

• Associate degree or 5+ years of information security experience.
• Experience triaging, analyzing, and escalating security vulnerabilities.
• Strong understanding of web app, network, endpoint and cloud security concepts.
• Scripting or programming in Python/JavaScript/Node.js with security tooling.

Responsibilities

• Triage, investigate, and respond to critical vulnerabilities.
• Evaluate and prioritize vulnerabilities identified through security tools and bug bounty programs.
• Research emerging threats and assess exploitability against Roche’s attack surface.
• Collaborate with infrastructure, cloud, application, and security teams to drive remediation.
• Develop scripts, detection logic, templates, and automation workflows to improve efficiency.
• Contribute to security monitoring and incident response in a global environment.

Skills

Python

JavaScript

Node.js

Education

Associate degree

Tools

Security tooling

Job description

Roche Holding AG is seeking a Security Engineer within the MIR team to protect networks, systems, and users from evolving cyber threats. You will identify, assess, prioritize, and reduce cybersecurity risks across Roche’s global environment.

Join a collaborative, highly technical cybersecurity team that values innovation, curiosity, continuous learning, and proactive risk reduction. You will engineer automation and remediation workflows to strengthen Roche’s security posture.