Vulnerability & Exposure Security Engineer — Threat Remediation

F. Hoffmann-La Roche AG; Petaling Jaya; On-site; MYR 90,000 - 150,000; Full time

Job summary

Roche is hiring a Security Engineer to join the Global MIR team. You will triage, investigate, and respond to critical vulnerabilities across Roche systems, while collaborating with global teams to drive remediation and strengthen security posture.

You will develop automation, assess threat exploitability, and support monitoring/incident response in a complex enterprise environment. Fluency in English and security certifications are valued.

Qualifications

• Associate Degree in a relevant field or 5+ years of professional information security experience.
• Strong understanding of web, network, endpoint and cloud security concepts.
• Hands-on scripting in Python/JavaScript/Node.js with security tooling and automation.
• Experience validating vulnerabilities and supporting monitoring or IR activities.
• Ability to communicate technical risk to diverse stakeholders.
• Passion for cybersecurity and continuous learning; AI-assisted workflows are a plus.
• Fluency in English; relevant certifications (OSCP, GWAPT, OSWE) are assets.

Responsibilities

• Triage, investigate, and respond to critical vulnerabilities across Roche systems.
• Evaluate and prioritize vulnerabilities from tools and external programs.
• Research emerging threats and assess exploitability against Roche’s attack surface.
• Collaborate with infrastructure, cloud, and application teams to drive remediation.
• Assess systems and web apps using automated and manual testing methods.
• Engineer and enhance vulnerability scanning, detection, and automation.
• Contribute to security monitoring and incident response in a global setting.
• Develop scripts and automation workflows to improve operations.
• Support continuous improvement across vulnerability and exposure processes.

Skills

Python

JavaScript

Node.js

Vulnerability Management

Automation

Security Monitoring

Education

Associate Degree or higher in a relevant field

Tools

Security tooling

Job description

Roche is hiring a Security Engineer to join the Global MIR team. You will triage, investigate, and respond to critical vulnerabilities across Roche systems, while collaborating with global teams to drive remediation and strengthen security posture.

You will develop automation, assess threat exploitability, and support monitoring/incident response in a complex enterprise environment. Fluency in English and security certifications are valued.