Cybersecurity Analyst – Monitoring & Incident Response

About the role

The Global Security Monitoring and Incident Response team at Roche protects networks, user devices and sensitive data from evolving cyber threats. As a Cybersecurity Analyst you will monitor security information, detect threats, and lead response actions across on‑premise and cloud environments.

Key responsibilities

• Monitor security events for a global environment and respond to incidents, often under pressure with partial information.
• Lead containment and remediation efforts during active security incidents and perform forensic analysis of relevant artifacts.
• Contribute to proactive threat detection, detection engineering, and threat‑hunting activities.
• Brief team members and senior leadership on relevant threats and communicate security concepts to non‑technical audiences.
• Mentor newer team members and provide operational feedback to improve detection and response processes.

Required profile

• Bachelor’s degree in a technical field.
• 7+ years of information‑security experience, including at least 3 years in a SOC/CERT/CSIRT environment.
• Ability to analyze, triage, and escalate security incidents and to communicate findings to non‑technical stakeholders.
• Fluent spoken and written English.

Required skills

• Scripting/programming: Python, JavaScript, Go, Rust.
• Operating systems: Windows, Linux, macOS.
• Knowledge of network and endpoint security monitoring, IAM concepts (Zero Trust, Identity‑Aware Proxies, Active Directory security), and cloud security (multi‑cloud, CSPM).