The Position

Senior Cybersecurity Analyst – Remote

A healthier future. It’s what drives us to innovate. To continuously advance science and ensure everyone has access to the healthcare they need today and for generations to come. Creating a world where we all have more time with the people we love. That’s what makes us Roche.

The Opportunity

As a Senior Cybersecurity Analyst, you will be a critical and valued member of our Product Security team. You will work with vulnerability, security monitoring, incidents response, etc., for digital health and diagnostics to enable operational security for clouds and medical diagnostic products. You will leverage your cybersecurity experience to drive projects that will create unique and innovative security solutions for Roche for globally.

This position can be remote anywhere within the US or be situated onsite in Mississauga, Canada.

Responsibilities

Conduct vulnerability monitoring, vulnerability scanning and other security testing activities.
Proactively identify flaws in Roche’s product security, assess patient safety and business risk, and advise product managers on remediation steps.
Manage vulnerabilities at all technology layers, evaluating the criticality for an adequate prioritization and providing the most suitable remediation, working directly with the product teams as a trusted advisor.
Analyze log files, alerts, binary data dumps, network packet captures and other artifacts/evidence to trace attack paths during incident response and provide forensic expertise to determine root cause of the breach.
Gather Threat Intelligence to identify and prepare for cyber threats to Roche products and enhance security monitoring and breach detection.
Drive security projects to develop and implement innovative security solutions.

Who You Are

BS/MS degree in Business, Information Systems, Computer Science or a directly related discipline.
A minimum of 5+ years of security or cybersecurity experience.
Demonstrated experience in threat and vulnerability management, security testing, and incident response.
Demonstrated experience automating security controls (e.g. Shell scripting, Python, etc.).
In-depth experience in managing information security and privacy risks and threat modeling.
In-depth experience in system and cloud infrastructure hardening and monitoring.
In-depth understanding of threat modeling, MITRE Attack, Kill Chain Analysis and other industry standard assessment methods
In-depth specialist knowledge in one of the following or related fields:
- Incident response and computer forensic analysis
- Endpoint detection and response (EDR/XDR)
- SIEM solutions administration and security monitoring
- Network security and monitoring including Firewalls and IDS/IPS solutions
- Threat Intelligence
Understanding of applicable standards, laws and regulations, like ISO 27000 family, FDA Guidances, MDGC, HITRUST, GDPR, California Privacy Rights Act, and related. with experience in applying them in SOC environments
Sound understanding of agile software development processes like Scrum or SAFe (Scaled Agile Framework) is highly preferred.
Industry relevant certifications preferred: SANS GIAC (GCIH, GPEN, GCIA, GCFA and others), CEH, CISSP, CISA, CISM, LA ISO27001.

The expected salary range for this position based on the primary location of CA is $107,900 – $236,300. Actual pay will be determined based on experience, qualifications, geographic location, and other job-related factors permitted by law. A discretionary annual bonus may be available based on individual and Company performance. This position also qualifies for the benefits detailed at the link provided below.

Benefits

Relocation benefits are not available for this job position.

Who we are

At Roche, more than 100,000 people across 100 countries are pushing back the frontiers of healthcare. Working together, we’ve become one of the world’s leading research-focused healthcare groups. Our success is built on innovation, curiosity and diversity.

Roche is an equal opportunity employer and strictly prohibits unlawful discrimination based upon an individual’s race, color, religion, gender, sexual orientation, gender identity/expression, national origin/ancestry, age, mental/physical disability, medical condition, marital status, veteran status, or any other characteristic protected by law.

If you have a disability and need an accommodation in relation to the online application process, please contact us by completing this form Accommodations for Applicants.

Roche Farma España

New Jobs

Senior Cybersecurity Analyst - Remote