Senior Security Engineer

Description

At Roche, you can be authentically yourself and are valued for your unique qualities. Our culture encourages personal expression, open dialogue, and genuine connections. Here, you are appreciated, accepted, and respected for who you are—creating an environment where you can grow both personally and professionally. Together, we aim to prevent, stop, and cure diseases and ensure that everyone has access to healthcare—today and in the future. Join Roche, where every voice matters. The Position The Senior Security Engineer plays a vital role in protecting Roche Manufacturing systems and networks against cybersecurity threats. This role is responsible for local architecture and engineering support, helping system owners and administrators keep their manufacturing environment up to date with the latest Roche Manufacturing Cybersecurity standards, baselines, and industry best practices. * Participating in technical design reviews, integration, testing, and documentation activities concerning new OT systems and/or changes to existing manufacturing systems or infrastructure * Supporting the development of Manufacturing Cybersecurity standards and baselines, and collaborating with the OT Cybersecurity Advisor during the OT System planning phase and the OT System Risk Assessment process * Leveraging secure, corporate-compliant AI accelerators and enterprise-ready platforms to automate routine log analysis, scripting, and threat modeling, effectively minimizing defensive response times against machine-speed cyber threats. * Advising system owners in selecting appropriate security measures to mitigate risk * Coordinating OT services and activities delivered by vendors * Reviewing local technical designs as part of Manufacturing Cybersecurity Requests (in ServiceNow) * Designing and sustaining OT Security Monitoring (IIDS) at the Manufacturing Site * Providing technical support during the Incident Response process—including steps to minimize impact, conducting technical and forensic investigations into how the breach occurred and the extent of damage * Working closely with system owners, the Cybersecurity Site Representative, and acting as a catalyst for cross-site collaboration on topics related to Manufacturing Cybersecurity Job Responsibilities The Senior Security Engineer is a member of the Manufacturing Cybersecurity Engineering team led by the Head of Manufacturing Cybersecurity Engineering and part of the Security Platforms subfunction within the Information Security function at Roche Scope * Independently manages end-to-end security analysis tasks across various capabilities and contributes to more complex problems * Mentors more junior team members and contributes to the development of security best practices Stakeholder Management * Identifies a diverse range of security stakeholders across functional areas and effectively manages relationships to build reliance through deep business and technical understanding, acting as a trusted advisor * Acts as a strategic influencer, defining and driving stakeholder engagement strategies for complex initiatives, facilitating workshops, resolving conflicts, and proactively shaping stakeholder perspectives to align with project goals Impact/Strategy * Demonstrates strong and consistent performance across diverse products, with an impact that typically extends to a specific product, initiative, or cluster * Translates requirements into strategic implementation plans that align with overall business objectives, and takes a proactive role in shaping team processes Complexity * Manages business analysis activities on more complex projects or across multiple products within a domain * Capable of handling ambiguous requirements, navigating intricate stakeholder environments, and evaluating solution impacts considering both immediate and longer-term implications within the domain Business/Technical ability * Demonstrates a strong understanding of the business domain, related technologies, and their interdependencies * Can independently apply tools, principles, concepts, and techniques related to requirements, data, usability, and process analysis, effectively managing interconnections to improve overall efficiency and effectiveness ​ Qualifications Education / Experience * Experience independently managing end-to-end security analysis tasks and leading the analysis of moderately complex cybersecurity incidents or vulnerabilities * Demonstrated ability to effectively manage relationships with a diverse range of cross-functional stakeholders on medium to large-sized engagements, acting as a trusted advisor * Proven track record of championing accountability by example, such as successfully taking on security incident lead and/or security project owner roles * A Bachelor’s degree in Computing Engineering, Automation Engineering, or a similar field is an asset. ​ Technical Skills * Minimum 5 years of experience in the IT Security field * Very good knowledge of local manufacturing and automation systems in use according to current industry standards is an asset. * Hands-on experience with emerging AI security standards and risk models. Experience utilizing secure, enterprise-ready AI productivity and engineering tools to automate routine log analysis, scripting, and threat modeling workflows to close the defensive time-gap against attackers. * Strong proficiency in independently applying tools, principles, and concepts related to requirements, data, usability, and process analysis within the security domain * Ability to analyze technology fit and propose effective, strategically aligned cybersecurity solutions and controls ​ Additional Qualifications The following skills and/or qualifications are an asset * Expertise in anti-virus software, intrusion detection, firewalls, and content filtering in OT * Knowledge of risk assessment tools, technologies, and methods * Expertise in designing secure networks, systems, and application architectures * Disaster recovery, computer forensic tools, technologies, and methods * System administration, supporting multiple platforms and applications * Endpoint security solutions, including file integrity monitoring * Deep understanding of cybersecurity terms and principles (defense-in-depth, network segmentation, security monitoring and incident response, access management, OT patch management, secure remote access, anti-malware protection, etc.) * Advanced knowledge of networking (LAN/WAN) and industrial networking, including significant low-level networking experience with TCP/IP (Transmission Control Protocol/Internet Protocol) * Solid knowledge of IT and OT infrastructure, including PLC security and protection * Current knowledge of technology capabilities and trends; types and techniques of hacking attacks * Java, .NET, C++, Python, bash, PowerShell * One of five potential security-related certifications (Certified Ethical Hacker (CEH), CompTIA Security+, Certified Information Systems Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Specialist certification, Global Industrial Cyber Security Professional (GICSP)) * Solid knowledge of IT infrastructure and service deployment model within Roche * Good knowledge of the Roche IT Security Standards Who We Are A healthier future drives us to innovate. More than 100,000 employees worldwide work together to achieve scientific progress and ensure that everyone has access to healthcare—today and for future generations. Through our commitment, over 26 million people are treated with our medicines and more than 30 billion tests are performed using our diagnostics products. We encourage each other to explore new possibilities, foster creativity, and set ambitious goals to deliver life-changing health solutions. Together, we can shape a healthier future. Roche is an equal opportunity employer.