Expert Security Engineer - Manufacturing Cybersecurity

En Roche puedes ser tú mismo y sentirte valorado por tus cualidades únicas. Nuestra cultura fomenta la expresión personal, el diálogo abierto y las conexiones genuinas, donde eres valorado, aceptado y respetado por lo que eres, permitiéndote prosperar tanto de manera personal como profesionalmente. Así es como buscamos prevenir, detener y curar enfermedades y asegurarnos de que todos tengan acceso a la atención sanitaria hoy y para las futuras generaciones. Únete a Roche, donde cada voz importa. La posición The Expert Security Engineer is a cornerstone of Roche’s defense, spearheading the protection of critical manufacturing systems and networks against an evolving landscape of sophisticated cybersecurity threats. You will provide expert-level architecture and engineering leadership, empowering system owners to fortify their environments in strict alignment with global standards and industry-leading best practices. Your strategic contributions will include: - Leading technical design reviews, integration, and testing to ensure security-by-design for all new and existing OT infrastructure. - Architecting global Manufacturing Cybersecurity standards and acting as a primary OT Cybersecurity Advisor during mission-critical system planning and risk assessments. - Leveraging secure, corporate-compliant AI accelerators and enterprise-ready platforms to automate routine log analysis, scripting, and threat modeling, effectively minimizing defensive response times against machine-speed cyber threats. - Providing authoritative guidance to System Owners on risk-mitigation strategies and complex security control selection. - Orchestrating high-value OT services and vendor-delivered activities to maintain a seamless, secure operational posture. - Vetting technical designs for ServiceNow Manufacturing Cybersecurity Requests to ensure enterprise-wide compliance. - Engineering and optimizing next-generation Industrial Intrusion Detection Systems (IIDS) for real-time site monitoring. - Leading technical incident response, driving forensic investigations, and executing containment strategies to mitigate breach impact. - Catalyzing cross-site collaboration by partnering with Cybersecurity Site Representatives to harmonize global security initiatives. Job Responsibilities You will be a key pillar of the Manufacturing Cybersecurity Engineering team, reporting to the Head of Manufacturing Cybersecurity Engineering within Roche’s global Information Security subfunction. In this capacity, you will: - Execute end-to-end security analysis across diverse capabilities, tackling the organization's most complex technical challenges. - Champion the professional development of the team by mentoring junior engineers and defining the "gold standard" for security practices. Stakeholder Management - Cultivate high-trust relationships with executive and technical stakeholders, serving as a strategic advisor on manufacturing risk. - Drive stakeholder engagement for complex initiatives, proactively shaping perspectives to ensure security is a business enabler ​ Impact/Strategy - Deliver measurable security improvements across product clusters, ensuring all strategic plans align with broader Roche business goals. - Transform high-level requirements into scalable implementation frameworks that future-proof our manufacturing environments. ​ Complexity - Orchestrates business analysis and strategic oversight across highly complex, cross-functional project portfolios and multi-product domains. - Navigates ambiguity to define clear project trajectories, manages intricate stakeholder ecosystems, and evaluates the cascading long-term implications of critical architectural and security decisions. ​ Business/Technical ability - Commands a deep, holistic understanding of the business domain, associated technology stacks, and their complex interdependencies. - Independently synthesizes advanced tools, principles, and methodologies for requirements, data, usability, and process analysis to engineer solutions that maximize operational efficiency, security posture, and systemic effectiveness. Qualifications Education / Experience - Proven expertise in architecting and leading end-to-end security analysis strategies and orchestrating the response to high-complexity cybersecurity incidents and systemic vulnerabilities. - Distinguished ability to command high-level relationships with a diverse ecosystem of executive and cross-functional stakeholders, serving as a primary Strategic Advisor on enterprise-scale engagements. - Exceptional track record of driving organizational accountability through visible leadership, including serving as a Lead for global security incidents and a project owner for mission-critical security initiatives. - A Bachelor’s degree in Computing Engineering, Automation Engineering, or a related technical discipline. Technical Skills - Extensive professional tenure with a minimum of 7-10 years of senior-level within the IT Security domain. - Authoritative knowledge of global manufacturing and automation standards, coupled with deep insights into local industrial systems, is highly regarded. - Commanding mastery of advanced tools, methodologies, and architectural principles for the analysis of complex requirements, data structures, and systemic processes. - Expertise in evaluating emerging technology landscapes to engineer and propose strategically aligned, future-proof cybersecurity solutions and defensive controls. Additional Qualifications The following advanced competencies are highly valued: Security Domain Expertise - Strategic mastery of cybersecurity defense-in-depth principles, including advanced network segmentation, real-time security monitoring, and complex incident response orchestration within OT environments. - Expertise in deploying enterprise-grade endpoint security and Industrial Intrusion Detection Systems (IIDS), including file integrity monitoring and sophisticated anti-malware protections. - Authoritative knowledge of industrial risk assessment methodologies and the engineering of robust disaster recovery and forensic investigation frameworks. ​ Architecture & Infrastructure - Proven ability to design and vet highly secure, scalable architectures for global networks, industrial systems, and mission-critical applications. - Advanced command of low-level networking protocols (TCP/IP) and the secure integration of IT/OT infrastructure, including PLC protection and secure remote access. - Deep institutional knowledge of Roche IT Security Standards and global service deployment models to ensure enterprise-wide harmonization. ​ Technical Proficiency - Strategic insight into emerging threat landscapes, including the evolution of hacking techniques and the engineering of proactive defensive controls. - Proficiency in leveraging automation and scripting (Python, PowerShell, Bash) and core development languages (Java, .Net, C++) to optimize security operations. ​ Certifications - Possession of industry-recognized certifications such as CISSP, GICSP, ISA/IEC 62443 Specialist, CEH, or Security+, reflecting a commitment to professional excellence. - Solid knowledge on IT infrastructure and service deployment model within Roche - Strong knowledge of the Roche IT Security Standards We support a flexible work environment with an expectation of working from the office approximately 40% of the time (typically two days per week Office presence required). Please note that relocation assistance is not provided for this position; candidates must already be authorized to work and live within commuting distance. Quienes somos Alcanzar un futuro más saludable es lo que nos impulsa a innovar. Juntos, más de 100.000 empleados en todo el mundo están dedicados a avanzar en la ciencia, asegurando que todos tengan acceso a la atención sanitaria hoy y para las futuras generaciones. Nuestros esfuerzos resultan en más de 26 millones de personas tratadas con nuestros medicamentos y más de 30 mil millones de pruebas realizadas con nuestros productos de Diagnósticos. Nos damos apoyo mutuamente para explorar nuevas posibilidades, fomentar la creatividad y mantener altas nuestras ambiciones, para poder ofrecer soluciones sanitarias que cambian la vida e impactan a nivel global. Construyamos juntos un futuro más saludable. Roche es una empresa que ofrece igualdad de oportunidades.