Security Engineer – Vulnerability & Exposure Strategy

Roche Services & Solutions Operations APAC; Selangor; On-site; MYR 90,000 - 150,000; Full time

Job summary

Roche Services & Solutions Operations APAC is seeking a Security Engineer to join the Vulnerability & Exposure Management team. You will triage, investigate, and remediate critical vulnerabilities across Roche’s global footprint, building automation and tooling to improve detection and response.

The role requires hands-on scripting, strong security fundamentals, and the ability to collaborate with global teams while communicating risks to technical and non-technical stakeholders.

Qualifications

• Associate Degree in a relevant field or 5+ years of professional experience in information security, with demonstrated experience triaging, analyzing, and escalating security vulnerabilities
• Strong understanding of web application, network, endpoint, and cloud security concepts, including vulnerability management or attack surface management within complex enterprise environments
• Hands‑on scripting or programming experience using languages such as Python, JavaScript, or Node.js, with familiarity in security tooling, detection logic, automation, or custom scripting
• Experience validating vulnerabilities, assessing exploitability, and supporting security monitoring or incident response activities
• Ability to communicate technical risks effectively to both technical and non-technical stakeholders, while balancing operational priorities and research initiatives
• Passion for cybersecurity, continuous learning, and emerging security trends, with exposure to open-source security projects or modern AI‑assisted engineering workflows considered advantageous
• Professional fluency in English, with industry certifications related to offensive or application security (e.g., OSCP, GWAPT, OSWE) and enterprise cloud security experience viewed as strong assets

Responsibilities

• Triage, investigate, and respond to critical vulnerabilities impacting Roche systems and applications
• Evaluate and prioritize vulnerabilities identified through security tools and external programs, including bug bounty initiatives
• Research emerging threats and assess exploitability against Roche’s attack surface
• Collaborate with infrastructure, cloud, application, and security teams to drive remediation activities
• Assess company systems and web applications using automated and manual testing approaches
• Engineer and enhance vulnerability scanning, detection, automation, and monitoring capabilities
• Contribute to security monitoring and incident response activities within a global environment
• Develop scripts, detection logic, templates, and automation workflows to improve operational efficiency
• Support continuous improvement initiatives across vulnerability and exposure management processes

Skills

Web security

Network security

Cloud security

Vulnerability management

Python

JavaScript

Node.js

Vulnerability validation

Incident response

Communication

Stakeholder management

Continuous learning

Open-source security

English proficiency

Education

Associate Degree in a relevant field

5+ years information security experience

OSCP

GWAPT

OSWE

Job description

Roche Services & Solutions Operations APAC is seeking a Security Engineer to join the Vulnerability & Exposure Management team. You will triage, investigate, and remediate critical vulnerabilities across Roche’s global footprint, building automation and tooling to improve detection and response.

The role requires hands-on scripting, strong security fundamentals, and the ability to collaborate with global teams while communicating risks to technical and non-technical stakeholders.