Cybersecurity Engineer for Edge Defense (Cloud)

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Network Security product makes Roche’s connectivity accessible and secure through actionable, policy-driven processes. The capabilities we provide enable Roche to identify, inspect, and mitigate cloud-based risks, manage regulatory compliance, and oversee egress/ingress traffic across all layers. Our solutions are primarily instantiated through leading-edge security platforms and automated orchestration. We work closely with Cloud, Infrastructure, and Incident Response teams to provide enterprise visibility into Roche’s network security posture.

As a Cloud Security Engineer, you will be part of the Information Systems Security team at Roche. You will join a global team of 40 engineers with expertise spanning Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This is an incredible opportunity to jumpstart your career, learn from senior experts, and grow your skills in a world-class enterprise security environment.

Job description 

In the role of Cloud Security Engineer, you will integrate into the Information Systems Security division at Roche. You will be part of a global collective of 40 technical specialists whose proficiency encompasses Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This position offers a premier chance to launch your professional journey, gaining insights from seasoned experts and refining your capabilities within a sophisticated enterprise security framework

Responsibilities

1. Architecture & Design

• Collaboratively, develop and improve the security features and engineering capabilities for the Roche Cloud Platform (automatic deployment pipelines, secure controls and guardrails, abstraction layers to ease Cloud adoption, delegation capabilities to enable self-service functionality to end customers, etc.).

• Contribute, based on Security Epics, to the Cloud SecDevOps Engineering team on technical implementations and decisions and provide software security architecture and insight for propositions, product designs and service enhancements. 

​

2. Product Lifecycle & Evolution

• Drive through all stages of the software development lifecycle, from requirements gathering and discussions with the Product Owner/Customer to the implementation and deployment of the security features, controls as code, and implement security policies and remediation processes using CI/CD. 

• Focuses on priorities, milestones and deliverables as per direction of the product management team and Security Requirements. 

​

3. Operational Excellence & Visibility

• Work with the Cloud SecDevops Engineering team to collaborate with stakeholders, customers, and external teams to improve Security posture of the Platform.

• Be part of the technical solution team focusing on maintaining service since they are live by measuring and monitoring availability and overall system health and improving the reliability of the IT Infrastructure

Qualification

Education / Experience

• Educational Background: Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related technical discipline, or equivalent foundational experience (e.g., intensive cloud/security training programs).

• Professional Experience: 1+ years of foundational experience in IT security, cloud administration, or software development (strong academic projects or internships will also be considered).

• Agile Methodology: Experience or familiarity working within an Agile/Scrum team structure.

• Collaborative Environment: Proven ability to collaborate effectively with engineering or cross-functional product teams to solve technical challenges.

Technical Skills

• AWS Cloud Infrastructure: Foundational, hands-on familiarity with core AWS services, specifically across computing, networking, storage, and databases.

• Cloud Security Basics: Conceptual understanding or baseline exposure to AWS native security services such as GuardDuty and Security Hub.

• Infrastructure as Code (IaC) & Scripting: Baseline working knowledge of Terraform for provisioning infrastructure and Python for automation scripting.

• Version Control: Foundational knowledge of Git and standard Gitflow branching practices.

• SDLC & CI/CD: Basic understanding of the software development lifecycle (SDLC) and how CI/CD pipelines function to deploy software or infrastructure.

Skills below will be considered a plus:

• Cloud Networking experience with VPC subnets, Security Groups, Transit Gateway, Network Firewall.

• Application Networking experience with AWS API Gateway, NLB/ALB.

• Preferred to be certified AWS Architect Professional/DevOps or equivalent working knowledge on AWS environments, 

• Familiarity with Palo Alto Next-Generation Firewalls (NGFW)

• Containers/serverless services knowledge.

• Experience with modern tools in the Agile Software Development Life Cycle.

• Experience on development workflow (i.e. JIRA).

Leadership Skills

• Communication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.

• Innovation & Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques.

• Thriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high-level security requirements into functional network policies.

• Self-Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle.

​

Additional Qualifications

• Demonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques

• Strong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks

• Demonstrated interpersonal, collaborative and commitment to operational excellence skills.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.