Cybersecurity Software Engineer — Roche

Full description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Cybersecurity Software Engineer

Roche Digital Technology (RDT) is where innovation meets purpose. As a global team at the heart of Roche, we are a community of business-minded technologists committed to help shape tomorrow’s digital future of healthcare. Our mission is to power Roche through cutting-edge digital technologies, harnessing the potential of artificial intelligence, data, and scalable tech innovations. Driven by purpose and passion, we’re building a future where digital is a core strength across all of Roche, enabling smarter ways of working, unlocking human potential, and driving breakthroughs that truly matter for millions of patients around the world.

At Roche, we offer a hybrid work model that combines flexibility with in-person collaboration. For now, we require our employees to be in our offices on average two days per week. The specific office days may vary depending on business needs, such as workshops, conferences, town halls, team meetings, and other collaborative events.

This role is based within the Network Security Product area, a team dedicated to making Roche’s connectivity accessible and secure through leading-edge security platforms and automated orchestration. By bridging the gap between rigorous infrastructure security and high-speed delivery, you will work alongside Cloud, Infrastructure, and Incident Response teams to protect our networks globally. The rapidly evolving threat landscape and our shift toward a software-driven engineering discipline offer you a unique opportunity to build scalable automation and drive continuous technical learning.

The opportunity

As a Senior Cybersecurity Engineer (Development Frameworks & Automation), your key responsibilities and priorities will include:

• Architecture & Design Baseline: Collaboratively building, designing, adapting, and standardizing internal security development frameworks and engineering practices, establishing consistent coding guidelines and architectural baselines across the product area.
• Structural Engineering & Guardrails: Contributing to structural engineering decisions by providing software design insights, defining secure control guardrails, and creating code abstraction layers to streamline the deployment of network controls.
• Product Lifecycle & Custom Automation: Driving code development to improve infrastructure services by writing robust scripts, modular automation blocks, and custom APIs to seamlessly scale connectivity safeguards.
• CI/CD Integration: Guiding technical implementations through all stages of the software engineering lifecycle—from defining structured automation frameworks to deploying tested, scalable security features using CI/CD.
• Operational Excellence & Code Quality: Standardizing core development workflows (such as version control frameworks, comprehensive testing, and peer review practices) to guarantee the reliability and code quality of live infrastructure configurations.
• Cross-Functional Collaboration: Working cross-functionally with internal stakeholders and platform teams to measure, monitor, and continuously improve the reliability, maintenance, and automated health checking of network infrastructure code.
• Continuous Improvement of Capabilities: Supporting the end-to-end delivery, design, and maintenance of technologies protecting Roche networks and the Internet (on-prem and cloud), including Internet Security Stack, DDoS Protection, Site-to-Site Connectivity (VPN), Network Access Control, and Deep Packet Inspect