[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Roche Holding jobs](https://jobs.opennash.com/companies/roche-holding/) · [Search jobs](/search/) Roche Holding · Madrid # Senior Security Engineer (SIEM) - RDT Security Platforms Madrid Full-time Senior individual contributor Security Listed on Roche Holding’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there. [Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Madrid/Senior-Security-Engineer--SIEM----RDT-Security-Platforms_202604-109905-2) [OpenNash Jobs](https://jobs.opennash.com/) / [Roche Holding](https://jobs.opennash.com/companies/roche-holding/) / Senior Security Engineer (SIEM) - RDT Security Platforms ## Job description At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position Senior Security Engineer Job description The Mission: You will be a key member of the SIEM team, contributing to the engineering and strategic evolution of our global Security Log Management and Vulnerability Scanning services. ### This is an end-to-end ownership role from defining the roadmap and architectural strategy to hands-on engineering and operational excellence. You will ensure our security infrastructure is not only reliable and scalable but also optimized for the modern era of federated data and AI-driven automation. ### Description of the area Key Responsibilities Service Ownership & Strategy: Drive the end-to-end lifecycle of our Security Log Management (Splunk & Cribl) and Security Scanning (Tenable) platforms. ### Service Reliability Ensure the high availability and performance of our security services globally, acting as an escalation point for complex technical challenges. ### System Interconnectivity Develop and manage sophisticated API integrations to ensure seamless data flow between the security scanning (Tenable) and logging (Splunk/Cribl) tiers. ### Next-Gen Security Log Architecture Drive the transition from a traditional "index-all" logging approach to a "data-tiering" mindset. You will focus on cost optimization and performance across all data lifecycle phases: routing, filtering, storing and searching, ensuring security data is accessible and cost-effective. ### Infrastructure as Code (IaC) Orchestrate the evolution of our security infrastructure by managing all configurations via CI/CD pipelines (GitHub, Ansible, and Python), to ensure a fully automated and version-controlled environment. ### AI-Augmented Engineering Actively integrate AI Agents and MCP (Model Context Protocol) servers into daily operations. You will build agentic AI workflows to automate configuration, troubleshooting, and complex interconnectivity, while simultaneously improving service offerings and user experience. ### Mentorship Act as a technical catalyst for the team, mentoring colleagues in the art of prompt engineering, agentic AI development, and advanced AI ecosystems. ### Technical Leadership Serve as a technical lead, defining implementation plans and driving continuous process improvements. ### Stakeholder Engagement Effectively manage relationships across functional teams, acting as a clear communicator and advisor to ensure alignment on security goals and project delivery. ### Technical Requirements & Expertise Security Service Depth: Deep conceptual understanding of the SIEM/Log Management lifecycle (Collection, Indexing, Storage, Retention and Searching) and Vulnerability Management. ### Networking Fundamentals Expert understanding of networking (TCP/IP, Load Balancing, Firewalls) as it relates to high-volume security data transport. ### Coding & API Mastery Strong experience with Python and interacting with complex REST APIs. Proven ability to interconnect disparate technologies via APIs and custom integrations. ### Modern DevOps Strong experience with Ansible and GitHub for managing infrastructure. ### Advanced AI/Automation Proven experience or deep project work building Agentic AI workflows. Practical expertise in MCP (Model Context Protocol) or building custom LLM-based tools to automate technical tasks. ### Tooling (Preferred) Experience with Cribl, Splunk, or Tenable is a plus, but the ability to rapidly upscale and automate these via AI is essential. Who we are A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. Roche is an Equal Opportunity Employer. ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Jul 16, 2026 - Last checked: Oct 18, 2026 - Listed for: 94 days - Location: Madrid - Employment type: Full-time[Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Madrid/Senior-Security-Engineer--SIEM----RDT-Security-Platforms_202604-109905-2) ## More jobs at Roche Holding ### [Cybersecurity Analyst - RDT Security Platforms](https://jobs.opennash.com/companies/roche-holding/jobs/e3d6944d460b6b3888fd/) Madrid ### [Cybersecurity Analyst –IAM ID Verification & External Collaborators](https://jobs.opennash.com/companies/roche-holding/jobs/741e1da6595a4b0975a4/) Madrid ### [Cybersecurity Engineer - Endpoint](https://jobs.opennash.com/companies/roche-holding/jobs/94dd5bf07f6caca90824/) Madrid ### [Cybersecurity Engineer - Monitoring & Incident Response](https://jobs.opennash.com/companies/roche-holding/jobs/ab21ecec5daed6c1ed05/) Madrid ## Similar jobs at other companies ### [Senior MS Security Engineer - SIEM](https://jobs.opennash.com/companies/ntt/jobs/72d896a35acc55a0b76b/) NTT · Chennai, Tamil Nādu, India ### [Technical Specialist - MS, Security - SIEM](https://jobs.opennash.com/companies/ntt/jobs/bbc4b534f68d9bdbb3e3/) NTT · Chennai, Tamil Nādu, India ### [SIEM Engineer - VOIS](https://jobs.opennash.com/companies/vodafone/jobs/9d9a5529a694d31d8b12/) Vodafone · Bangalore, Karnataka, India ### [Lead Security SIEM Engineer](https://jobs.opennash.com/companies/nxp-semiconductors/jobs/b549d0fb06e2bf2ad704/) NXP Semiconductors · Bucharest ### [Senior Cyber Security Engineer (SIEM)](https://jobs.opennash.com/companies/cencora/jobs/14dc816b453c808948be/) Cencora · Vilnius, Lithuania OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)