Cybersecurity Analyst - Monitoring & Incident Response

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.The PositionThe Opportunity: The Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a CyberSecurity Analyst -Monitoring & Incident Response, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users. Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources. All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. CyberSecurity Analysts are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems. Note: As an incident responder, you are expected to take part in an on call rotation during weekends and can be mobilized during major incidents. Responsibilities:Monitoring and Incident Response for a global environmentTake decisions, often under pressure, given partial informationContribute to proactive threat detection effortsLead containment and remediation efforts during active security incidentsPerform forensic analysis of relevant artifacts to support investigationsContribute to detection engineering activities across a global teamBrief team members and leadership on relevant threats to the Roche groupCommunicate information security concepts and situations to senior managementContribute operational feedback to continuously strengthen detection and response processesMentor newer team membersWho You Are: Bachelor’s degree in a technical field and 7+ years of experience in information security, including at least 3 years in a SOC/CERT/CSIRT environmentFamiliarity with TLP and information sharing best practicesAbility to communicate information security-related concepts and situations to a non-technical audienceDemonstrated ability to analyze, triage, and escalate information security incidentsKnowledge of detection engineering and threat-hunting conceptsScripting and programming skills (Python, Javascript, Go, Rust, …)Demonstrated knowledge of operating systems (Windows, Linux, macOs)Excellent organization and communication skills.Fluent spoken and written EnglishPreferred Qualifications:Network and Endpoint security monitoring experience in a large complex environmentPrior exposure to privacy frameworks in the context of IT security monitoringKnowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, …)Knowledge of Cloud security concepts (multi-cloud environments, CSPM, …)A passion for the field of computer and network securityFamiliarity with various defensive AND offensive security toolsetsPublic speaking or mentoring experienceRelocation benefits are not available for this job postingWho we areA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.Let’s build a healthier future, together.Roche is an Equal Opportunity Employer.SummaryLocation: San Jose, Costa RicaType: Full time