Cybersecurity Analyst - RDT Security Platforms

About the role

Roche's Secure Access team protects its global workforce by delivering and operating the technologies behind secure, reliable and compliant access to corporate resources, at the intersection of network security, identity and cloud. As a Security Engineer on this team, you will design, implement and operate the technologies behind remote access, web security and network protection, in a fast-paced, self-directed environment.

Key responsibilities

• Design, implement and operate WAF-based web security and Zero Trust access solutions, including leading design and proof-of-concept evaluations.
• Manage WAF configuration, policy tuning and day-to-day operations, and support automation to reduce manual toil.
• Manage infrastructure-as-code with Terraform, keeping version-controlled configurations in GitHub.
• Own configuration management in ServiceNow, ensuring accurate CMDB records and change management compliance.
• Ensure security solutions meet regulatory requirements and support audit and compliance activities.
• Identify gaps in access controls, collaborate with network, identity and cloud teams, and mentor junior team members.

Required profile

• 3-7 years of hands-on security engineering experience, with a focus on network security and secure access.
• Hands-on experience designing and proving WAF solutions; prior experience in a regulated industry (healthcare, finance, pharma, government) is a plus.
• Strong written and verbal English, detail-oriented, collaborative and able to lead incident analysis independently.

Required skills

• WAF (any vendor; Cloudflare a plus)
• Terraform and GitHub
• ServiceNow (CMDB, change management, incident management)
• Automation scripts, workflows or CI/CD pipelines
• Nice to have: scripting (Python, PowerShell, Bash), Agile/DevOps, CI/CD tools (GitHub Actions, Jenkins, Ansible), cloud security (AWS, Azure, GCP), SIEM/EDR, and certifications such as PCNSE, Cloudflare Certified or CCNP Security.