Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.Die PositionThe Global Security Monitoring& Incident Response (MIR) team at Roche is dedicated to protecting our networks, systems, applications, and users from constantly evolving cyber threats. As a Security Engineer within the Vulnerability& Exposure Management team, you will play a critical role in identifying, assessing, prioritizing, and reducing cybersecurity risks across Roche’s global environment.This role goes beyond reviewing scanner outputs. You will help investigate critical vulnerabilities, assess exploitability, improve security tooling and automation capabilities, and partner with stakeholders globally to strengthen Roche’s security posture.You will join a collaborative and highly technical cybersecurity team that values innovation, curiosity, continuous learning, and proactive risk reduction.Your OpportunityIn this role, you will:Triage, investigate, and respond to critical vulnerabilities impacting Roche systems and applicationsEvaluate and prioritize vulnerabilities identified through security tools and external programs, including bug bounty initiativesResearch emerging threats and assess exploitability against Roche’s attack surfaceCollaborate with infrastructure, cloud, application, and security teams to drive remediation activitiesAssess company systems and web applications using automated and manual testing approachesEngineer and enhance vulnerability scanning, detection, automation, and monitoring capabilitiesContribute to security monitoring and incident response activities within a global environmentDevelop scripts, detection logic, templates, and automation workflows to improve operational efficiencySupport continuous improvement initiatives across vulnerability and exposure management processes

Associate Degree in a relevant field or 5+ years of professional experience in information security, with demonstrated experience triaging, analyzing, and escalating security vulnerabilitiesStrong understanding of web application, network, endpoint, and cloud security concepts, including vulnerability management or attack surface management within complex enterprise environmentsHands-on scripting or programming experience using languages such as Python, JavaScript, or Node.js, with familiarity in security tooling, detection logic, automation, or custom scripting