Data Security Engineer

Roche fosters diversity, equity and inclusion, representing the communities we serve. When dealing with healthcare on a global scale, diversity is an essential ingredient to success. We believe that inclusion is key to understanding people’s varied healthcare needs. Together, we embrace individuality and share a passion for exceptional care. Join Roche, where every voice matters.

The Position

Data Security Engineer

At Roche, we foster a diversity of scientific approaches and embrace innovative ideas. Combining that with the seamless integration of our capabilities in Roche Pharma and Roche Diagnostics, we are uniquely positioned to achieve medical breakthroughs for patients and society.  With our global spread of research, diagnostics and pharma development, data analytics and genomic insight teams, we are all working to translate science and research into groundbreaking therapies and diagnostics.

We are seeking a skilled and experienced Data Security Engineer to join our team and contribute to the development and maintenance of our Data Platform. As a Data Security Engineer, you will play a crucial role in ensuring the security and privacy of our data assets.

You will be part of the Information Systems Security team at Roche.  We are a team of 40 engineers distributed across the globe with expertise in Cloud Security, Endpoint Protection, Network Security, Remote Access Management, etc. 

The opportunity:

• Design, implement, and maintain robust security measures and protocols for our Data Platform.

• Develop and enforce data security policies and procedures to protect sensitive information.

• Collaborate with cross-functional teams to identify potential vulnerabilities in the data platform architecture and provide solutions to mitigate risks.

• Conduct regular security assessments and audits to identify and address any security gaps or vulnerabilities.

• Monitor and analyze security events and incidents, and respond promptly to any security breaches or threats.

• Stay up-to-date with the latest industry trends and best practices in data security and privacy including regulations such as GDPR and others. Propose improvements accordingly.

• Work closely with the Data Engineering and IT teams to implement security controls and ensure compliance with relevant regulations and standards.

• Provide guidance and support to other team members on data security best practices and procedures.

• Participate in incident response activities and contribute to the development of incident response plans.

Who you are:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.

• 3+ years of proven experience as a Data Security Engineer or in a similar role.

• Hands-on experience with data security principles, practices, and technologies, including encryption, access control, and data loss prevention (DLP).

• Experience working with data security platforms such as Immuta (a plus).

• Familiarity with cloud-based data platforms and security solutions (AWS, Azure, Snowflake).

• Solid understanding of data governance frameworks and compliance with industry regulations (e.g., GDPR, HIPAA).

Technical skills:

• Proficiency in designing and implementing security protocols for data platforms.

• Experience with security assessments, vulnerability management, and penetration testing.

• Strong analytical skills to assess risk and develop effective security solutions.

• Knowledge of incident response and management processes.

• Hands-on experience with automation and scripting (Python, Shell scripting) is a plus

Additional requirements:

• Strong communication and collaboration skills to work effectively with cross-functional teams.

• Ability to explain complex security concepts to non-technical stakeholders.

• Self-motivated with strong problem-solving and critical-thinking abilities.

• Ability to work in a hybrid setup based in Poland or Madrid.