Cybersecurity Analyst - Monitoring & Incident Response

About the role

Roche’s Global Security Monitoring and Incident Response (MIR) team is looking for a seasoned Cybersecurity Analyst to protect proprietary information, patient data, and the company’s IT environment. You will work in a global setting, analysing massive streams of security signals to detect abuse or compromise across on‑premise and cloud resources.

Key responsibilities

• Monitor security information and respond to incidents in a 24/7 global environment.
• Make rapid decisions under pressure with partial information.
• Lead containment, remediation, and forensic analysis during active security incidents.
• Contribute to proactive threat detection and detection‑engineering activities.
• Brief team members, leadership, and senior management on relevant threats.
• Mentor newer analysts and provide operational feedback to improve processes.

Required profile

• Bachelor’s degree in a technical field.
• 7+ years of information‑security experience, including at least 3 years in a SOC/CERT/CSIRT environment.
• Strong communication skills, able to explain security concepts to non‑technical audiences.
• Experience with TLP and information‑sharing best practices.
• Willingness to participate in on‑call rotation and be mobilised for major incidents.

Required skills

• Scripting/programming: Python, JavaScript, Go, Rust.
• Operating systems: Windows, Linux, macOS.
• Knowledge of detection engineering and threat‑hunting concepts.
• Familiarity with network and endpoint security monitoring in large, complex environments.
• Understanding of modern IAM controls and privacy frameworks.