Cybersecurity Analyst – Monitoring & Incident Response

About the role

Roche’s Global Security Monitoring and Incident Response (MIR) team is looking for a seasoned Cybersecurity Analyst to protect proprietary information, patient data, and the overall information environment. You will analyze large volumes of security signals, detect abuse or compromise across on‑premise and cloud resources, and respond to incidents in a fast‑paced, global setting.

Key responsibilities

• Monitor security information and respond to incidents worldwide, often under pressure with partial data.
• Lead containment and remediation during active security events.
• Perform forensic analysis of artifacts to support investigations.
• Contribute to proactive threat detection and detection‑engineering activities.
• Brief team members, leadership, and senior management on relevant threats.
• Mentor newer analysts and provide operational feedback to improve processes.
• Participate in on‑call rotation for weekends and major incidents.

Required profile

• Bachelor’s degree in a technical field.
• 7+ years of information‑security experience, including at least 3 years in a SOC/CERT/CSIRT environment.
• Strong communication skills, able to explain security concepts to non‑technical audiences.
• Fluent spoken and written English.

Required skills

• Python, JavaScript, Go, Rust scripting/programming.
• Operating‑system expertise: Windows, Linux, macOS.
• Detection engineering and threat‑hunting concepts.
• Network and endpoint security monitoring.
• Familiarity with TLP and information‑sharing best practices.
• Knowledge of modern IAM controls and privacy frameworks.