Cybersecurity Analyst - Monitoring & Incident Response

About the role

The Global Security Monitoring and Incident Response (MIR) team at Roche protects networks, user devices and data from evolving threats. As a Cybersecurity Analyst you will monitor security information, detect threats, and respond to incidents across on‑premise and cloud environments.

Key responsibilities

• Monitor security events and respond to incidents in a global environment, often under pressure with partial information.
• Lead containment, remediation and forensic analysis during active security incidents.
• Contribute to proactive threat detection, detection engineering and threat‑hunting activities.
• Brief team members and senior leadership on relevant threats and provide operational feedback to improve processes.
• Mentor newer team members and participate in on‑call rotation for weekend coverage.

Required profile

• Bachelor’s degree in a technical field.
• 7+ years of information‑security experience, including at least 3 years in a SOC/CERT/CSIRT environment.
• Strong communication skills, able to explain security concepts to non‑technical audiences.
• Fluent spoken and written English.

Required skills

• Python, Javascript, Go, Rust scripting/programming.
• Operating‑system knowledge: Windows, Linux, macOS.
• Familiarity with detection engineering, threat‑hunting, and forensic analysis.
• Understanding of network and endpoint security monitoring.