Product Cybersecurity Expert

At Roche you can show up as yourself, embraced for the unique qualities you bring.

Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.

This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.

Join Roche, where every voice matters.

The Position

Join us as a Product Cybersecurity Expert in Sant Cugat, Barcelona!

Data security and privacy are key success factors in our digital transformation and essential to reach our ambitions.

At Roche, we empower our team members with cutting-edge resources and a collaborative environment that drives innovation and excellence.

As a Product Cybersecurity Expert, you have the opportunity to contribute to the overall Roche Diagnostics vision by applying end-to-end Division-wide product security and privacy operations to keep our products and services secure and privacy compliant throughout the entire lifecycle.

What sets Roche apart is our commitment to professional development, well-being, and a dynamic work-life balance.

Our Employee Value Proposition (EVP) includes comprehensive benefits, continuous learning opportunities, and a culture that values diversity and inclusion.

You believe in the potential of science, technology, data, and insights to improve the standard of care for humankind and you are eager to navigate through unchartered territory to lift this potential.

Join a company where your expertise will be recognized, and your contributions will make a direct impact on global health and patient outcomes.

Key Challenges


* Defining security and privacy requirements for Roche products, medical devices or health/clinical solutions both in the cloud and on-premises during all product software development lifecycle.


* Contributing to the development and support implementation of security and privacy risk management framework across the product lifecycle.


* Supporting in the definition, implementation and maintenance of product security and privacy control measures for a product or platform, considering changes in technology, regulations and customer needs. 


* Managing vulnerabilities at all technology layers during pre and post market activities of the product or platform, making sure they are fixed in a timely manner.


* Assess the risks of vulnerabilities detected in security testing activities (SCA, SAST, DAST, IAC, Pentest, etc.) for a given product and support on the remediation activities.


* Conducting planning and coordination of external security testing activities (verification & validation) and remediation plans (e.g.

pentest). 


* Supporting security incident response and forensic activities working directly with the Roche Intelligence and Defense teams.


* Conduct Threat Modelling and Cybersecurity Risk Management Assessmen...