Cybersecurity Analyst Intern — Roche
- Location
- Root
- Contract
- full-time
- Posted
- 3 days ago
Role overview
At Roche you can show up as yourself, embraced for the unique qualities you bring.
Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.
- At Roche you can show up as yourself, embraced for the unique qualities you bring.
- Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
- Key Responsibilities
- Vulnerability Assessment & Analysis: Perform end-to-end security assessments on product components and software stacks, identifying potential security flaws, exposure points, and software risks.
- & Skills:
Main responsibilities
- Key Responsibilities
- Vulnerability Assessment & Analysis: Perform end-to-end security assessments on product components and software stacks, identifying potential security flaws, exposure points, and software risks.
- Automation & AI Integration: Contribute actively to the automation of
- Software Bill of Materials (SBOM) vulnerability management workflows and help pioneer AI-augmented vulnerability assessment frameworks to scale security operations.
- Cross-Stakeholder Reporting: Translate complex technical vulnerabilities into clear, actionable risk reports for engineering, product management, and leadership teams.
- Product Team Enablement & Remediation Support: Partner directly with product teams to help them comprehend vulnerability root causes and potential impact, collaborate on pragmatic and effective remediation strategies, and assist in prioritizing fixes within development roadmaps.
- Continuous Improvement: Track emerging threat vectors, zero-days, and security industry standards (such as CVSS, NIST, OWASP) to continuously refine assessment criteria and automated tooling. Who You Are
- You are a proactive, analytical cybersecurity professional who thrives on solving complex technical challenges and communicating security concepts to both technical and non-technical audiences.
Key requirements
- & Skills:
Application process
- Experience: Proven experience in threat and vulnerability management, product security, application security, or software security analysis.
- Technical Knowledge: Strong understanding of vulnerability scoring systems (e.g., CVSS),
- Software Bill of Materials (SBOM) management, software composition analysis (SCA), and common vulnerability frameworks (CVE/CWE).
- Automation & Scripting: Demonstrated ability or strong interest in automating security workflows (e.g., Python, Bash, CI/CD integrations) and applying emerging AI/ML technologies to security assessments.
- Remediation Strategy: Ability to guide engineering teams through root-cause analysis and realistic fix prioritization without compromising delivery velocity.
- Communication & Influence: Excellent written and verbal communication skills, with a track record of building positive, consultative relationships with software and product teams. Who we are A healthier future drives us to innovate.
- Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come.
- Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products.
Additional details
- Join Roche, where every voice matters.
- Threat & Vulnerability Analyst (Product Security)
- Continuous Improvement: Track emerging threat vectors, zero-days, and security industry standards (such as CVSS, NIST, OWASP) to continuously refine assessment criteria and automated tooling. Qualifications & Skills:
- Communication & Influence: Excellent written and verbal communication skills, with a track record of building positive, consultative relationships with software and product teams. A healthier future drives us to innovate.
Notes and original content
- The Position
- The Opportunity
- Continuous Improvement: Track emerging threat vectors, zero-days, and security industry standards (such as CVSS, NIST, OWASP) to continuously refine assessment criteria and automated tooling.
- Who You Are
- Qualifications & Skills:
- Communication & Influence: Excellent written and verbal communication skills, with a track record of building positive, consultative relationships with software and product teams.
- Who we are
- A healthier future drives us to innovate.
Questions about this listing
What salary does Roche offer for this role?
Roche lists CHF 52'000 - 78'500 gross per year for this position in Root. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Roche offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Roche during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Lucerne?
EU/EFTA residents living in the border zone of the country adjoining Canton Lucerne can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Lucerne's cantonal migration office or with HR during the application.
How do I apply for this position at Roche?
Use the "Apply now" button on this page — it links directly to Roche's original listing at roche.wd3.myworkdayjobs.com, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
