[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Roche Holding jobs](https://jobs.opennash.com/companies/roche-holding/) · [Search jobs](/search/)

Roche Holding · Madrid

# Cybersecurity Engineer - Monitoring & Incident Response

Madrid Full-time Security 

Listed on Roche Holding’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there.
[Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Madrid/Cybersecurity-Engineer----Monitoring---Incident-Response_202605-113205-2)

[OpenNash Jobs](https://jobs.opennash.com/) / [Roche Holding](https://jobs.opennash.com/companies/roche-holding/) / Cybersecurity Engineer - Monitoring & Incident Response

## Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position The Global Security Monitoring and Incident Response (MIR) team at Roche strives to keep our networks and users safe from constantly evolving threats. As a Cybersecurity Engineer, you will help protect proprietary information, patient data, keep computer systems clean, and provide a safe information environment for our users. Combing through massive amounts of signals, you will have to identify signs of abuse or compromise of on-premise as well as cloud resources.

All team members share a set of core responsibilities, handling incidents, requests from experts, as well as enquiries from end users. Cybersecurity are responsible for monitoring security information, identifying threats, and showing initiative to defend all Roche information systems. As a member of the Incident Response Enablement team, you are encouraged to support on-call rotation during weekends, and will be mobilized during major incidents.

### Job Responsibilities

Monitoring and Incident Response for a global environment Elicit feedback and obtain data to continuously strengthen detection and response processes Be a force of proposition to steer continuous improvement efforts, partnering with other teams within the Cybersecurity space Enhance the platforms and automations that empower detection, investigation and response
- Drive remediation efforts by turning investigations and lessons learned into structural improvements across the company, partnering with other experts across the Roche group Brief peers and leadership on threats relevant to the Roche group
- Communicate information security concepts and situations to senior management
- Organize structured knowledge exchange sessions with partners and peers
- Mentor team members Qualifications Education / Experience / Technical Skills
- Bachelor’s degree in a technical field and 5+ years of experience in information security, including at least
- 3 years in a SOC/CERT/CSIRT environment
- Ability to design and implement complex security systems and processes to strengthen Roche’s posture
- Familiarity with TLP and information sharing best practices
- Ability to communicate information security-related concepts and situations to a non-technical audience
- Demonstrated ability to analyze, triage, and escalate information security incidents
- Ability to take decisions, often under pressure and given partial information
- Knowledge of detection engineering and threat-hunting concepts Scripting and programming skills (Python, Javascript, Go, Rust)
- Demonstrated knowledge of operating systems (Windows, Linux, macOs) Experience in Cloud security for major providers
- Excellent organization and communication skills Attention to detail Fluent spoken and written English

### Additional Qualifications

Network and Endpoint security monitoring experience in a large complex environment
- Knowledge of modern IAM controls and concepts (Zero Trust, Identity Aware Proxies, Active Directory Security, …) Experience designing/building/improving logging, monitoring and detection pipelines Capacity to identify vulnerabilities, propose pragmatic hardening measures, and influence platform or development teams
- Familiarity with various defensive AND offensive security toolsets A passion for the field of computer and network security Who we are A healthier future drives us to innovate.

Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together. Roche is an Equal Opportunity Employer.

## At a glance
- Posted by the employer: Not stated
- First seen by OpenNash: Oct 11, 2026
- Last checked: Oct 18, 2026
- Listed for: 7 days
- Location: Madrid
- Employment type: Full-time[Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Madrid/Cybersecurity-Engineer----Monitoring---Incident-Response_202605-113205-2)

## More jobs at Roche Holding

### [Cybersecurity Analyst - RDT Security Platforms](https://jobs.opennash.com/companies/roche-holding/jobs/e3d6944d460b6b3888fd/)

Madrid

### [Cybersecurity Analyst –IAM ID Verification & External Collaborators](https://jobs.opennash.com/companies/roche-holding/jobs/741e1da6595a4b0975a4/)

Madrid

### [Cybersecurity Engineer - Endpoint](https://jobs.opennash.com/companies/roche-holding/jobs/94dd5bf07f6caca90824/)

Madrid

### [Cybersecurity Engineer for Edge Network Security](https://jobs.opennash.com/companies/roche-holding/jobs/9d5c9bc0014bf6f975ae/)

Madrid

## Similar jobs at other companies

### [Cybersecurity Incident Response Lead](https://jobs.opennash.com/companies/microsoft/jobs/0a5610e1958c0d34e891/)

Microsoft · Singapore

### [Cybersecurity Monitoring Lead](https://jobs.opennash.com/companies/siemens-energy/jobs/ab76dc4ce8c644719757/)

Siemens Energy · Bucharest, Romania

### [Senior Cybersecurity Incident Coordinator](https://jobs.opennash.com/companies/microsoft/jobs/4112b24f330c3e1c96ff/)

Microsoft · Australia, New South Wales, Sydney, Victoria, Melbourne, Australian Capital Territory, Canberra, Queensland, Brisbane, Tasmania, Hobart

### [IT/OT L2 Cybersecurity Monitoring Specialist](https://jobs.opennash.com/companies/siemens-energy/jobs/2eccb65a8dad6705a21d/)

Siemens Energy · Bucharest, Romania

### [Cybersecurity Incident Response Engineer](https://jobs.opennash.com/companies/schneider-electric/jobs/bdbd14c3e32575353662/)

Schneider Electric · Barcelona, Spain

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)