Descripción de la oferta
Overview
As a Penetration Tester in Roche’s Product Security & Privacy Organization, you help secure Roche’s digital healthcare solutions. You will perform vulnerability assessments and pen tests across digital, cloud, and medical device products, guiding teams toward safer designs. Your work supports patient safety and trustworthy innovation at scale. This role offers the chance to influence security by design across a global product portfolio and to collaborate with cross-functional teams in a mission-driven environment.
ResponsabilidadesConduct penetration testing across digital solutions, cloud apps, and medical devicesIdentify and prioritize vulnerabilities with product teams throughout the lifecycleProvide security guidance during design and development to ensure secure-by-designContribute to and maintain a central repository of testing methods and toolsSupport Incident Response with technical analysis and forensicsExecute red team exercises to test resiliencePrepare security reports with risk assessments and actionable recommendationsPromote defense-in-depth and security-by-design across product linesImprove processes, playbooks, and tooling for scalable product securityLeverage AI-assisted security tools to enhance testing scope and efficiency
Requisitos principales2+ years leading and executing penetration testing across web apps, APIs, cloud environments, or embedded devicesBachelor’s degree in Computer Science, Information Systems, or related field (preferred)Solid background in vulnerability assessment and penetration testingKnowledge of OWASP Top 10 and SDLC security practicesExperience automating security controls (e.g., shell scripting, Python)Understanding of information security and privacy risksStrong communication of complex vulnerabilities to technical and non-technical stakeholdersProactive, collaborative, self-driven mindset with continuous learningRelevant industry certifications valued (e.g., SANS GIAC, OSCP, CISSP, CEH)Interest in emerging AI technologies and LLM vulnerabilitiesstrong communicationteamworkleadershippenetration testingvulnerability assessmentred team
