Security Engineer – Vulnerability & Exposure Management

About the role

Roche’s Global Security Monitoring and Incident Response (MIR) team is looking for a Security Engineer to join the Vulnerability and Exposure Management team. You will protect sensitive data, defend computer systems and web applications, and help build future security capabilities.

Key responsibilities

• Triaging, investigating and responding to critical vulnerabilities affecting Roche.
• Evaluating, prioritising and communicating risk from vulnerability scans and the bug‑bounty program.
• Researching emerging vulnerabilities and confirming exploitability against the attack surface.
• Collaborating with system owners and stakeholders to mitigate security findings.
• Assessing company systems and web applications using automated and manual tools.
• Maintaining and improving scanning, detection and automation solutions.
• Participating in global security monitoring activities.

Required profile

• Associate degree in a relevant field or 5+ years of experience in information security.
• Fluent English communication skills.
• Strong ability to explain complex risks to non‑technical audiences.
• Passion for security research and operational balance.

Required skills

• Programming experience with Python, Node.js and JavaScript.
• Experience writing custom detection logic, scripts and templates.
• Ability to triage, analyse and validate vulnerabilities, including basic exploit development.
• Knowledge of web‑application, network and cloud security.
• Familiarity with attack surface management and AI‑assisted development tools.