Security Engineer - Vulnerability & Exposure Management

Security Engineer - Vulnerability & Exposure Management

The Global Security Monitoring & Incident Response team at Roche is seeking a Security Engineer to identify, assess, and mitigate cybersecurity risks across a global environment. This role involves investigating critical vulnerabilities, improving security automation, and collaborating with cross-functional teams to strengthen the company's security posture.

Responsibilities

• Triage, investigate, and respond to critical vulnerabilities.
• Prioritize vulnerabilities from security tools and bug bounty programs.
• Research emerging threats and assess exploitability.
• Collaborate with infrastructure, cloud, and application teams to drive remediation.
• Assess systems and web applications using manual and automated testing.
• Develop scripts, detection logic, and automation workflows to enhance operational efficiency.
• Contribute to global security monitoring and incident response activities.

Requirements

• Associate Degree or 5+ years of professional experience in information security.
• Strong understanding of web application, network, endpoint, and cloud security.
• Hands-on scripting experience (e.g., Python, JavaScript, Node.js).
• Experience validating vulnerabilities and assessing exploitability.
• Ability to communicate technical risks to diverse stakeholders.
• Passion for continuous learning and emerging security trends.
• Professional fluency in English; industry certifications (e.g., OSCP, GWAPT) are a plus.