Expert Security Engineer - Manufacturing Cybersecurity

About the role

Roche is looking for an Expert Security Engineer to lead the protection of its critical manufacturing systems and networks against sophisticated cyber threats. The role provides expert-level architecture and engineering leadership, empowering system owners to align with global standards and best practices. It sits within the Manufacturing Cybersecurity Engineering team, reporting to the Head of Manufacturing Cybersecurity Engineering.

Key responsibilities

• Lead technical design reviews, integration and testing to ensure security-by-design for new and existing OT infrastructure.
• Architect global Manufacturing Cybersecurity standards and act as primary OT Cybersecurity Advisor during system planning and risk assessments.
• Use secure, compliant AI accelerators and enterprise platforms to automate log analysis, scripting and threat modeling.
• Advise System Owners on risk mitigation and security control selection, and vet ServiceNow requests for compliance.
• Optimize Industrial Intrusion Detection Systems (IIDS) for real-time monitoring and lead incident response, forensics and containment.
• Partner with Cybersecurity Site Representatives to coordinate global security initiatives.
• Mentor junior engineers and drive stakeholder engagement, turning requirements into scalable implementation frameworks.

Required profile

• Bachelor's degree in Computing Engineering, Automation Engineering or a related technical discipline.
• Minimum 7-10 years of senior-level experience in IT Security.
• Proven track record of leading security analysis, incident response and high-complexity projects, and of building trust with executives and technical stakeholders.
• Must already be authorized to work and live within commuting distance of Madrid; relocation assistance is not provided.

Required skills

• Knowledge of global manufacturing and automation standards and industrial systems.
• Advanced tools and architectural principles for analyzing requirements, data and processes.
• Preferred: defense-in-depth, network segmentation, IIDS, endpoint security, TCP/IP, PLC protection, Python, PowerShell, Bash, Java.Net, C++.
• Preferred certifications: CISSP, GICSP, ISA/IEC 62443 Specialist, CEH or Security+.

Flexible work environment with about 40% office presence (typically two days per week).