OT Cybersecurity Engineer

Roche fosters diversity, equity and inclusion, representing the communities we serve. When dealing with healthcare on a global scale, diversity is an essential ingredient to success. We believe that inclusion is key to understanding people’s varied healthcare needs. Together, we embrace individuality and share a passion for exceptional care. Join Roche, where every voice matters.

The Position

Roche is dedicated to evolving the practice of medicine and helping patients to live longer, better lives. Our operations are critical to the success of our company and our impact on society. As a Cybersecurity Engineer,, you will be part of an industry-leading organization helping patients to obtain on-time and reliable diagnostics. Doing now what patients need next. 

Job Summary

The Cybersecurity Engineer plays a vital role in protecting Roche manufacturing systems and networks against cybersecurity threats. This role is responsible for local architecture and engineering support, helping system owners and administrators in keeping their manufacturing environment up to date with the latest Roche Manufacturing Cybersecurity standards, baselines and industry best practices. Active involvement in the implementation of the Manufacturing Cybersecurity Management System in the entire system and service lifecycle including Plan, Design, Build and Release, Operate and Maintain.

The Opportunity

• Takes part in technical design reviews, integration, testing, and documentation activities concerning new IT and OT systems

• Supports development of Manufacturing Cybersecurity standards and baselines

• OT Cybersecurity Advisor during OT System planning phase

• Participates in Technical Design reviews, representing OT Cybersecurity

• Supports IT OT System Risk Assessment process

• Advises System Owners in selecting appropriate security measures to mitigate risk

• Supports the coordination process for IT OT Security Patch planning 

• Coordination of IT OT services and activities delivered by Vendors

• Reviews Manufacturing Firewall Requests

• Performs the design and sustainment of OT Security Monitoring (IIDS)

• Supports investigation after security breaches and develops suitable defense measures, evaluate system changes for security implications, and recommend enhancements

• Supports vulnerability management process in OT area

• Supports development of strategies to respond to and recover from a security breach in OT environment

• Technical support during the Incident Response process including steps to minimize the impact, conducting a technical and forensic investigation into how the breach happened and the extent of the damage

• Generating GxP documentation and executing testing protocols in a regulated environment

• Focusing on L0-L3 of the ISA95 model

• Team up with  Manufacturing  Representatives

• Collaborate with engineers, operators, and other stakeholders to understand and address security needs

• Develop and enforce cybersecurity policies and procedures for OT systems

• Ensuring compliance with relevant regulations, standards, and best practices

• Provide Training and awareness programs regarding OT Cybersecurity best practices

Who You Are

• BS Computer Science, Information Technology,  Cybersecurity or similar

• Minimum of 3 years of demonstrated experience in system and/or network administration

Preferred Technical Skills

• Expertise in anti-virus software, intrusion detection, firewalls and content filtering in OT

• Expertise in designing secure networks, systems and application architectures

• Disaster recovery, computer forensic tools, technologies and methods

• Endpoint security solutions, including file integrity monitoring 

• Deep understanding of cybersecurity terms and principles (defense-in-depth, network segmentation, security monitoring and incident response, access management, OT patch management, secure remote access, anti-malware protection etc.)

• Advanced knowledge on networking (LAN/WAN) and industrial networking including significant low-level networking experience with the TCP/IP and C