Cybersecurity Engineer - Endpoint

About the role

Roche is looking for a highly skilled Cybersecurity Engineer to protect its digital footprint at the endpoint level. The team manages critical security products such as Endpoint Detection and Response (EDR), Application Control and Secure Data Erasure, and is seeking a driven, technically rigorous engineer to maintain and evolve its security tools with a modern, automation-first approach.

Key responsibilities

• Maintain the global EDR solution across thousands of Windows, macOS and Linux endpoints
• Design, implement and tune Application Control policies (AppLocker, WDAC or equivalents) so only trusted executables, scripts and libraries run
• Minimise false positives and optimise system performance
• Support the maintenance and auditing of secure data wiping services
• Build scripts, tools and API integrations to automate repetitive tasks and deployments
• Partner with other cybersecurity experts to turn their security requirements into scalable, automated solutions

Required profile

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or equivalent practical experience
• 3+ years of hands-on experience managing EDR solutions (e.g. Cortex XDR, CrowdStrike, Microsoft Defender for Endpoint) in a large enterprise
• C1-level written and spoken English
• A builder mentality, problem-solving and adaptability in a dynamic cybersecurity environment

Required skills

• Enterprise endpoint security, application whitelisting and secure data handling
• OS internals: Windows, Linux and macOS
• Configuration management and deployment tools such as Ansible, Terraform, SCCM, Microsoft Intune and Jamf
• SDLC, Git and CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions)