Cyber Security Analyst (m/f/d)

Cyber Security Analyst (m/f/d) – Cloud / fullstack / python/ MITRE / Scrum

Project:
For our customer Roche Diagnostics International AG based in Rotkreuz we are looking for a highly qualified Cyber Security Analyst (m/f/d).

Background:
The Product Security & Privacy Operations department is looking for a junior security analyst. As a result of the transformation one and a half years ago, 4 teams were formed under this department. One of these 4 teams, consisting of 15 people, is the intelligence and defense team. This team is looking for a motivated young individual to support in vulnerability management and incident response. This is an opportunity to become part of an international team spread across the US, Europe and India.

The perfect candidate can come from two different backgrounds. They have either completed a university degree in computer science or information systems. The perfect candidate can also come from an apprenticeship in informatics if they have at least 2 years of working experience in cyber security. Both university or working-level experience should include developed skills in Cloud computing technologies, full stack deployments, automating security controls, managing information security, privacy risks and threat modeling and, agile software development processes. We are looking for a motivated individual willing to learn and take on new challenges.

Tasks & Responsibilities:

Conducts vulnerability monitoring, vulnerability scanning and other security testing activities.
* Proactively identifies flaws in Roche’s product security, assesses patient safety and business risk, and advises product managers on remediation steps.
* Manages vulnerabilities at all technology layers, evaluating the criticality for an adequate prioritization and providing the most suitable remediation, working directly with the product teams as a trusted advisor.
* Analyzes log files, alerts, binary data dumps, network packet captures and other artifacts/evidence to trace attack paths during incident response and provide forensic expertise to determine root cause of the breach.
* Gathers Threat Intelligence to identify and prepare for cyber threats to Roche products and enhance security monitoring and breach detection
* End-to-end accountable for security operations activities, prioritization and coordination of tasks during isolation, containment, analysis, and remediation of security incidents and breaches.
* Contributes to / participates in global projects within the area of expertise.
* Contributes to initiatives within the Diagnostic Division to achieve the integration of cybersecurity capabilities into products in collaboration with other multi-disciplinary teams.
* Develops, maintains and continuously optimizes processes, playbooks and tools.
* Maintains the product security controls and awareness supporting other PSPO Teams.

Must Haves:
Min. Bsc.or Master degree or completed apprenticeship in Computer Science, Information Systems or related discipline OR a completed apprenticeship with min. 2+ years experience in in threat and vulnerability management, security testing, and incident response
* Min. 2 years experience in all of the following (University experience counts):
* Experience in Cloud computing technologies, full stack deployments, etc.
* Demonstrated experience automating security controls (eg. shell scripting, python)
* Hands-on experience in managing information security and privacy risks and threat modeling.
* In-depth experience in system and cloud infrastructure hardening and monitoring
* Understanding of threat modeling, MITRE Attack, Kill Chain Analysis and other industry standard assessment methods
* Sound understanding of agile software development processes like SCRUM or SAFe (Scaled Agile Framework).

Nice to Haves:
Knowledge in one or multiple of the following or related fields:
* Malware analysis and reverse engineering
* Incident response and computer forensic analysis
* Endpoint detection and response (EDR/XDR)
* SIEM solutions administration and security monitoring
* Network security and monitoring including Firewalls and IDS/IPS solutions
* Penetration testing
* Secure DevOps (DevSecOps)
* Threat Intelligence

Reference Nr.: 922536SGR
Role: Cyber Security Analyst
Industrie: Pharma
Workplace: Rotkreuz
Pensum: 100%
Start: 01.06.2023
Duration: 12++
Deadline: 11.04.2023

If you are interested in this position, please send us your complete dossier via the link in this advertisement. If this position does not fit your profile and you wish to be considered for another position directly, you can also send us your dossier via this ad or to jobs[at]itcag[dot]com.

Contact us for more information about our company, our positions or our attractive Payroll-Only programme: +41 41 760 77 01.

About us:
ITech Consult is an ISO 9001:2015 certified Swiss company with offices in Germany and Ireland. ITech Consult specialises in the placement of highly qualified candidates for recruitment in the fields of IT, Life Science & Engineering.

We offer staff leasing & payroll services. For our candidates this is free of charge, also for Payroll we do not charge you any additional fees.