Security Engineer - Manufacturing Cybersecurity

About the role

Roche is looking for a Security Engineer to protect its Manufacturing systems and networks against cybersecurity threats. The role provides local architecture and engineering support, helping system owners and administrators keep their manufacturing environment up to date with Roche Manufacturing Cybersecurity standards, baselines and industry best practices. It sits in the Manufacturing Cybersecurity Engineering team, within the Security Platforms subfunction of the Information Security function.

Key responsibilities

• Take part in technical design reviews, integration, testing and documentation of new OT systems or changes to existing manufacturing systems
• Support the development of Manufacturing Cybersecurity standards and baselines, and advise during OT system planning and risk assessment
• Use secure, compliant AI tools to automate log analysis, scripting and threat modeling
• Advise system owners on security measures, coordinate OT services from vendors and review designs in Manufacturing Cybersecurity Requests (ServiceNow)
• Design and sustain OT Security Monitoring (IIDS) at the site and support incident response, including forensic investigations
• Work with system owners and the Cybersecurity Site Representative on cross-site collaboration

Required profile

• 0-3 years of experience in IT or Cyber Security
• Bachelor's degree in Computing Engineering, Automation Engineering or similar is an asset
• Foundational knowledge of cybersecurity principles and willingness to learn in a manufacturing environment
• Ability to work from the office about 40% of the time (typically two days per week); relocation assistance is not provided, so candidates must be able to commute

Required skills

• Basic knowledge of local manufacturing and automation systems is an asset
• Preferred: anti-virus, IDS, firewalls, content filtering, risk assessment tools, secure network design, disaster recovery, forensics, endpoint security, LAN/WAN and TCP/IP, PLC security, Java.NET, C++, Python, Bash, PowerShell
• One of five certifications is an asset: CEH, CompTIA Security+, CISSP, ISA/IEC 62443 or GICSP