Cybersecurity Engineer - Monitoring & Incident Response
Roche is hiring a Cybersecurity Engineer - Monitoring & Incident Response in Madrid, Spain. Level rates it ; you can apply on Roche.
Level's read on this job
- Level rates this cybersecurity role Little AI โโโโ: aI is not part of the work.
- Level classes it as a senior role.
- Roche has 1,200+ other open roles on Level.
- Posted in the last few days.
AI in this role
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The Position
The Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a Cybersecurity Engineer, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users. Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources. All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. Cybersecurity are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems.
As a member of the Incident Response Enablement team, you are encouraged to support on-call rotation during weekends, and will be mobilized during major incidents.
Job Responsibilities
Monitoring and Incident Response for a global environment
Elicit feedback and obtain data to continuously strengthen detection and response processes
Be a force of proposition to steer continuous improvement efforts, partnering with other teams within the Cybersecurity space
Enhance the platforms and automations that empower detection, investigation and response
Drive remediation efforts by turning investigations and lessons learned into structural improvements across the company, partnering with other experts across the Roche group
Brief peers and leadership on threats relevant to the Roche group
Communicate information security concepts and situations to senior management
Organize structured knowledge exchange sessions with partners and peers
Mentor team members
Qualifications
Education / Experience / Technical Skills
Bachelorโs degree in a technical field and 5+ years of experience in information security, including at least 3 years in a SOC/CERT/CSIRT environment
Ability to design and implement complex security systems and processes to strengthen Rocheโs posture
Familiarity with TLP and information sharing best practices
Ability to communicate information security-related concepts and situations to a non-technical audience
Demonstrated ability to analyze, triage, and escalate information security incidents
Ability to take decisions, often under pressure and given partial information
Knowledge of detection engineering and threat-hunting concepts
Scripting and programming skills (Python, Javascript, Go, Rust)
Demonstrated knowledge of operating systems (Windows, Linux, macOs )
Experience in Cloud security for major providers
Excellent organization and communication skills
Attention to detail
Fluent spoken and written English
Additional Qualifications
Network and Endpoint security monitoring experience in a large complex environment
Knowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, โฆ)
Experience designing/building/improving logging, monitoring and detection pipelines
Capacity to identify vulnerabilities, propose pragmatic hardening measures, and influence platform or development teams
Familiarity with various defensive AND offensive security toolsets
A passion for the field of computer and network security
Who we are
A healthier future drives us to innovate. Together, more than 100โ000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Letโs build a healthier future, together.
Roche is an Equal Opportunity Employer.
How we rate this
Cybersecurity Engineer - Monitoring & Incident Response at Roche rates 38 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- โโโโ Builds AI80 to 100
- โโโโ Works on AI60 to 79
- โโโโ Uses AI40 to 59
- โโโโ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Also common in cybersecurity jobs at this level
Pay
- Typical cybersecurity job
- $160k
This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new cybersecurity jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Security roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step