Senior Cybersecurity Analyst

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

Senior Cybersecurity Analyst

Responsibilities:

• Proactively identify flaws in Roche’s product security, assess patient safety and business risk, and advise product managers on remediation steps.
• Project & Stakeholder Leadership: Autonomously lead cybersecurity projects from inception to completion. Organize and facilitate cross-functional meetings with product teams, leading technical presentations and communicating remediation findings to internal stakeholders with minimal supervision. 
• Analyze log files, alerts, binary data dumps, network packet captures and other artifacts/evidence to trace attack paths during incident response and provide forensic expertise to determine root cause of the breach.
• Drive security operations activities, prioritization and coordination of tasks during isolation, containment, analysis, and remediation of security incidents and breaches.
• Conduct security monitoring, vulnerability scanning and other security testing activities.
• Operations & Tool Management: Drive daily security operations activities, manage enterprise security tools like SIEM, and optimize operational efficiency across environments. 
• Gather Threat Intelligence to identify and prepare for cyber threats to Roche products and enhance security monitoring and breach detection. Leverage OSINT techniques to identify emerging cyber threats and enhance monitoring capabilities. 
• Provide expertise to answer inquiries, pre-sales requests, M&A, contract negotiations and other cybersecurity-related customer support
• Is familiar with Firewall technologies and configurations.
• Contribute to initiatives within the Diagnostic Division to achieve the integration of cybersecurity capabilities into products in collaboration with other multi-disciplinary teams.
• Develop, document, and continuously refine operational playbooks, standard operating procedures, and automated response frameworks. 
• Maintain the product security controls and awareness supporting other PSPO Teams.
• Support team members with less experience and provide guidance

Requirements: 

• Demonstrated experience in security operations, security testing, and incident response. 
• Hands-on experience managing and configuring Network Security controls (Firewalls, IDS/IPS) and SIEM solutions. 
• Demonstrated experience automating security controls (eg. shell scripting, python)
• In-depth experience in managing information security and privacy risks and threat modeling.
• In-depth experience in system and cloud infrastructure hardening and monitoring
• In-depth understanding of threat modeling, MITRE Attack, Kill Chain Analysis and other industry standard assessment methods
• In-depth specialist knowledge in one of the following or related fields:
  • Malware analysis and reverse engineering
  • Incident response and computer forensic analysis
  • Endpoint detection and response (EDR/XDR)
  • SIEM solutions administration and security monitoring
  • Network security and monitoring including Firewalls and IDS/IPS solutions
  • Threat Intelligence

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.