Cybersecurity Engineer for Edge Defense

Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt. Die Position The Network Security product makes Roche’s connectivity accessible and secure through actionable, policy-driven processes. The capabilities we provide enable Roche to identify, inspect, and mitigate cloud-based risks, manage regulatory compliance, and oversee egress/ingress traffic across all layers. Our solutions are primarily instantiated through leading-edge security platforms and automated orchestration. We work closely with Cloud, Infrastructure, and Incident Response teams to provide enterprise visibility into Roche’s network security posture. As a Cloud Security Engineer, you will be part of the Information Systems Security team at Roche. You will join a global team of 40 engineers with expertise spanning Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This is an incredible opportunity to jumpstart your career, learn from senior experts, and grow your skills in a world-class enterprise security environment.

Job description
In the role of Cloud Security Engineer, you will integrate into the Information Systems Security division at Roche. You will be part of a global collective of 40 technical specialists whose proficiency encompasses Cloud Security, Endpoint Protection, Network Security, and Remote Access Management. This position offers a premier chance to launch your professional journey, gaining insights from seasoned experts and refining your capabilities within a sophisticated enterprise security framework Responsibilities 1. Architecture & Design Collaboratively, develop and improve the security features and engineering capabilities for the Roche Cloud Platform (automatic deployment pipelines, secure controls and guardrails, abstraction layers to ease Cloud adoption, delegation capabilities to enable self-service functionality to end customers, etc.). Contribute, based on Security Epics, to the Cloud SecDevOps Engineering team on technical implementations and decisions and provide software security architecture and insight for propositions, product designs and service enhancements. 2. Product Lifecycle & Evolution Drive through all stages of the software development lifecycle, from requirements gathering and discussions with the Product Owner/Customer to the implementation and deployment of the security features, controls as code, and implement security policies and remediation processes using CI/CD. Focuses on priorities, milestones and deliverables as per direction of the product management team and Security Requirements. 3. Operational Excellence & Visibility Work with the Cloud SecDevops Engineering team to collaborate with stakeholders, customers, and external teams to improve Security posture of the Platform. Be part of the technical solution team focusing on maintaining service since they are live by measuring and monitoring availability and overall system health and improving the reliability of the IT Infrastructure Qualification Education / Experience Educational Background: Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related technical discipline, or equivalent foundational experience (e.g., intensive cloud/security training programs). Professional

Experience:
1+ years of foundational experience in IT security, cloud administration, or software development (strong academic projects or internships will also be considered). Agile Methodology: Experience or familiarity working within an Agile/Scrum team structure. Collaborative Environment: Proven ability to collaborate effectively with engineering or cross-functional product teams to solve technical challenges. Technical Skills AWS Cloud Infrastructure: Foundational, hands-on familiarity with core AWS services, specifically across computing, networking, storage, and databases. Cloud Security Basics: Conceptual understanding or baseline exposure to AWS native security services such as GuardDuty and Security Hub. Infrastructure as Code (IaC) & Scripting: Baseline working knowledge of Terraform for provisioning infrastructure and Python for automation scripting. Version Control: Foundational knowledge of Git and standard Gitflow branching practices. SDLC & CI/CD: Basic understanding of the software development lifecycle (SDLC) and how CI/CD pipelines function to deploy software or infrastructure. Skills below will be considered a plus: Cloud Networking experience with VPC subnets, Security Groups, Tran