Senior Cybersecurity Analyst

Hace 3 días

Barcelona, España Roche Jornada completa

OverviewIn this role, you will strengthen Roche's product security to protect patient safety and business interests.
You'll lead cybersecurity initiatives within cross-functional teams, analyze security incidents, and refine operational playbooks.
You will drive threat intelligence, security monitoring, and remediation efforts across Roche products in collaboration with the Diagnostic Division.
This is a chance to shape secure products at scale and contribute to a healthier future.
ResponsabilidadesProactively identify security flaws in Roche's product security and advise on remediation
Lead cybersecurity projects end-to-end and run cross-functional meetings with product teams
Analyze logs, artifacts, and network data to trace attack paths and determine root cause
Coordinate security incident response and remediation efforts across isolation, analysis, and containment
Operate and optimize enterprise security tools (SIEM) and security processes
Gather threat intelligence (including OSINT) to anticipate cyber threats and enhance monitoring
Support customer inquiries, pre-sales, M&A, and cybersecurity-related negotiations
Contribute to integrating cybersecurity capabilities into Roche products within the Diagnostic Division
Develop and refine playbooks, SOPs, and automated response frameworks
Mentor team members and provide guidance to less experienced staff
Requisitos principalesExperience in security operations, security testing, and incident response
Hands-on management of network security controls (Firewalls, IDS/IPS) and SIEM
Automation of security controls (shell scripting, Python)
Experience in information security and privacy risk management and threat modeling
Experience in system and cloud infrastructure hardening and monitoring
Knowledge of threat modeling, MITRE ATT&CK, and related assessment methods
Specialist knowledge in malware analysis, incident response, EDR/XDR, SIEM, or threat intelligence
5+ years of relevant cybersecurity experience or BS/MS plus equivalent
Professional certifications are a plus (e.g., AWS Certified Security, CISSP, GSEC, GCIH, Network+/Security+)
leadership and autonomous project management
strong communication and stakeholder engagement
mentoring and coaching
Security operations
Security testing
Incident response