Senior Security Engineer (SIEM) - RDT Security Platforms

About the role

Roche is looking for a Senior Security Engineer to join its SIEM team in Madrid. You will be a key member of the team behind the global Security Log Management and Vulnerability Scanning services, owning the role end-to-end: from roadmap and architecture strategy through hands-on engineering and operations. The goal is to keep the security infrastructure reliable, scalable and optimised for federated data and AI-driven automation.

Key responsibilities

• Own the lifecycle of the Security Log Management (Splunk and Cribl) and Security Scanning (Tenable) platforms
• Ensure high availability and performance of the security services globally, acting as escalation point for complex issues
• Build and manage API integrations between the scanning and logging tiers
• Drive the move from index-all logging to a data-tiering approach, optimising cost and performance across routing, filtering, storage and search
• Manage infrastructure via CI/CD pipelines (GitHub, Ansible, Python) so it is fully automated and version controlled
• Integrate AI agents and MCP servers into daily work, building agentic workflows for configuration, troubleshooting and interconnectivity
• Mentor colleagues in prompt engineering, agentic AI and advanced AI ecosystems
• Act as technical lead, define implementation plans and drive process improvements
• Engage stakeholders across functional teams and advise on security goals and project delivery

Required profile

• Deep understanding of the SIEM/log management lifecycle (collection, indexing, storage, retention, search) and vulnerability management
• Expert knowledge of networking (TCP/IP, load balancing, firewalls) for high-volume security data
• Strong coding and API skills, with proven ability to connect technologies via APIs and custom integrations
• Experience building agentic AI workflows and practical use of MCP or custom LLM-based tools
• Ability to quickly learn and automate tools such as Cribl, Splunk or Tenable

Required skills

• Python and REST APIs
• Ansible and GitHub
• Preferred: Cribl, Splunk or Tenable