[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Roche Holding jobs](https://jobs.opennash.com/companies/roche-holding/) · [Search jobs](/search/) Roche Holding · Madrid # Cybersecurity Engineer - Endpoint Madrid Full-time Security Listed on Roche Holding’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there. [Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Madrid/Cybersecurity-Engineer---Endpoint_202605-112913) [OpenNash Jobs](https://jobs.opennash.com/) / [Roche Holding](https://jobs.opennash.com/companies/roche-holding/) / Cybersecurity Engineer - Endpoint ## Job description At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position We are looking for a highly skilled Cybersecurity Engineer responsible for protecting our digital footprint at the endpoint level. Our team manages critical security products across the enterprise, including Endpoint Detection and Response (EDR), Application Control, and Secure Data Erasure. Our team consists of deep subject matter experts in cybersecurity and we are looking for a driven, technically rigorous Security Engineer to join us. Your primary mission will be to maintain and evolve our security tools, bringing a modern, automation-first development mindset to our operational security practices to ensure optimal performance. ### Job Responsibilities Maintenance at scale: Configure, deploy, and maintain our global Endpoint Detection and Response (EDR) solution across thousands of endpoints (Windows, macOS, and Linux) to ensure peak performance. ### Application Control Governance Design, implement, and fine-tune Application Control policies (e.g., AppLocker, WDAC, or third-party equivalents) to ensure only trusted executables, scripts, and libraries run within our environment, balancing security with user productivity. ### Optimization Continuous evaluation to minimize false positives, optimize system performance, and improve the overall signal-to-noise ratio. ### Secure Data Erasure Lifecycle Support the maintenance and auditing of our enterprise-grade secure data wiping services. ### Automation Leverage a development mindset to build scripts, tools, and API integrations that automate repetitive engineering tasks and deployment processes. ### Cross-Functional Collaboration Partner with other senior cybersecurity experts, translating their deep security requirements into scalable, automated technical solutions. ### Qualifications Education / Experience Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or equivalent practical experience. 3+ years of proven, hands-on experience managing EDR solutions (e.g., Cortex XDR, CrowdStrike, Microsoft Defender for Endpoint) in a large-scale enterprise environment. Proficiency in written and spoken English (C1 or above level). ### Technical Skills Security Foundations: Good fundamental understanding of enterprise cybersecurity, specifically around endpoint security (EDR/XDR platforms like Cortex XDR), application whitelisting, and secure data handling. ### Application Control Expertise Strong practical experience designing, rolling out, and maintaining Application Control/Whitelisting strategies across complex organizational structures. ### OS Internals Strong understanding of operating system architectures, processes, memory management and filesystems (Windows, Linux, macOS). ### Analytical Mindset Excellent troubleshooting skills with the ability to dive into complex system logs to trace issues back to their root cause. ### Automation & Deployment Hands-on experience with configuration management and deployment tools (e.g., Ansible, Terraform, SCCM, Microsoft Intune, Jamf). ### Development Best Practices Solid understanding of software development lifecycles (SDLC), version control (Git), and CI/CD pipelines (e.g., GitLab CI, Jenkins, GitHub Actions). ### Additional Qualifications The " ### Builder" Mentality You look at a manual, repetitive IT task and immediately think about how to write a script to do it better and faster. ### Problem Solver Capable of troubleshooting complex deployment failures across varied endpoint environments. ### Adaptable Comfortable working in a highly dynamic cybersecurity environment where priorities can shift based on emerging needs. ### Team Player Ability to collaborate effectively with internal and external team mates and stakeholders. Who we are A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. Roche is an Equal Opportunity Employer. ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Jul 16, 2026 - Last checked: Oct 18, 2026 - Listed for: 94 days - Location: Madrid - Employment type: Full-time[Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Madrid/Cybersecurity-Engineer---Endpoint_202605-112913) ## More jobs at Roche Holding ### [Cybersecurity Analyst - RDT Security Platforms](https://jobs.opennash.com/companies/roche-holding/jobs/e3d6944d460b6b3888fd/) Madrid ### [Cybersecurity Analyst –IAM ID Verification & External Collaborators](https://jobs.opennash.com/companies/roche-holding/jobs/741e1da6595a4b0975a4/) Madrid ### [Cybersecurity Engineer - Monitoring & Incident Response](https://jobs.opennash.com/companies/roche-holding/jobs/ab21ecec5daed6c1ed05/) Madrid ### [Cybersecurity Engineer for Edge Network Security](https://jobs.opennash.com/companies/roche-holding/jobs/9d5c9bc0014bf6f975ae/) Madrid ## Similar jobs at other companies ### [Senior Lead Engineer, Cybersecurity, Endpoint Security](https://jobs.opennash.com/companies/stryker/jobs/93ce1843a7b43eeb9423/) Stryker · Costa Rica, Heredia San Antonio Business Park ### [endpoint automation engineer](https://jobs.opennash.com/companies/richemont/jobs/98fa7ed6b0c126f5bb14/) Richemont ### [endpoint protection engineer](https://jobs.opennash.com/companies/richemont/jobs/c79214558fd5b659ad58/) Richemont ### [Senior Engineer, Endpoint Security](https://jobs.opennash.com/companies/loews/jobs/e46cceccdf5d9bbf561f/) Loews ### [Senior Engineer, Endpoint Security](https://jobs.opennash.com/companies/loews/jobs/faa44278be29fead8893/) Loews · Nashville - Loews Hotels & Co, TN OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)