At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Department Summary

We are seeking a highly motivated professional with experience in Security and Privacy to join our dynamic team. As a Junior Penetration Tester, your main responsibilities will include supporting and assisting in penetration testing activities to ensure the security of Roche products and solutions. This role involves collaborating with Product Teams, executing predefined test strategies, and documenting the results. You will play a crucial role in identifying vulnerabilities and aiding in the reporting process.

The Opportunity

• Work closely with Product Teams to understand and determine testing requirements and assist in the development, planning, scoping and execution of testing activities (both in physical and cloud products).

• Conduct cybersecurity penetration testing activities across various technology layers, assessing the criticality of vulnerabilities for adequate prioritization, and providing suitable remediation recommendations to product teams.

• Maintain and utilize the repository of penetration testing methods and tools to ensure consistency and standardization in testing practices.

• Create detailed reports and present findings, associated risks, and recommendations to product teams and management.

• Participate in planning and managing red team exercises to assess the cyber resilience of products and solutions.

• Support the Incident Response team during incidents.

• Contribute to initiatives aimed at integrating defense capabilities into products in collaboration with other PSPO colleagues.

• Develop, maintain, and continuously optimize processes, playbooks, and tools to enhance penetration testing efficiency and effectiveness.

Program Highlights

• Intensive 1 year intern graduate program (Contrato en prácticas).

• Competitive salary and benefits package.

• Location in Sant Cugat del Valles, On Site.

• Access to training and development opportunities.

• Work with some of the most talented people in the biotechnology industry.

Who You Are (Required)

• Must have graduated from a University degree program.

• Must have attained a Bachelor's degree.

• Experience or familiarity with cloud computing technologies, vulnerability assessment, and penetration testing.

• Knowledge of automating security controls through scripting languages such as shell scripting and Python.

• Understanding of information security and privacy risks.

• Problem solving abilities, communication, teamwork, flexibility and adaptability. 

• Team player, proactive, self-driven, solution-oriented, and hands-on.

Required Majors: Information Systems, Computer Science or a related relevant area of study.

This opportunity is part of the START TECH program.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.