Security Engineer – Vulnerability & Exposure Management

About the role

Roche’s Global Security Monitoring and Incident Response team is looking for a Security Engineer to join the Vulnerability and Exposure Management team. You will protect sensitive data, defend systems and web applications, and help build future security capabilities.

Key responsibilities

• Triage, investigate and respond to critical vulnerabilities affecting Roche.
• Evaluate and prioritize findings from scanners and the bug‑bounty program.
• Research emerging vulnerabilities and develop methods to confirm exploitability.
• Communicate risk and collaborate with system owners to mitigate issues.
• Assess company systems and web applications using automated and manual tools.
• Maintain, improve and engineer scanning, detection and automation solutions.
• Participate in security monitoring for a global environment.

Required profile

• Associate degree in a relevant field or 5+ years of experience in information security.
• Fluent English communication skills.
• Programming experience with Python, Node.js and JavaScript.
• Proven ability to triage, analyze and validate vulnerabilities, including basic exploit development.
• Focus on web‑application, network and computer security; cloud security experience is a plus.
• Familiarity with attack‑surface management and AI‑assisted development tools.
• Industry certifications such as OSCP, GWAPT or OSWE are desirable.

Required skills

• Python
• Node.js
• JavaScript

What we offer

• Opportunity to work on cutting‑edge security challenges in a global healthcare leader.
• Collaborative environment that values diversity and inclusion.