Cybersecurity Engineer - Network Security
About the job
- A bachelor's degree in Computer Science, Software Engineering, Information Security, or a related technical field is required.
- At least 3 years of hands-on experience designing, implementing, and managing enterprise-grade network access control solutions, specifically Cisco Identity Services Engine.
- Experience configuring and maintaining Palo Alto Next-Generation Firewalls, including Secure Sockets Layer decryption and threat prevention, is required.
- Experience using Ansible, Terraform, or Python to manage network security infrastructure at scale is required.
- Experience managing security controls in complex global environments involving thousands of diverse Internet of Things, medical, and corporate device profiles is required.
- Expert-level knowledge of Cisco Identity Services Engine, including TrustSec, Dot1x, MAC Authentication Bypass, and profiling, is required.
- Strong scripting skills in Python, PowerShell, or Bash are required to develop self-service tools and custom application programming interface integrations between security platforms.
- Deep experience with Representational State Transfer application programming interfaces for integrating security platforms with external information sources is required.
- Proficiency in network virtualization and segmentation techniques, such as TrustSec, Security Group Tags, or Virtual Routing and Forwarding, is required.
- Experience deploying and troubleshooting Palo Alto firewalls in complex high-availability environments, including active/active and active/passive configurations, is required.
- Deep understanding of RADIUS, TACACS+, and core routing and switching as they relate to security enforcement is required.
- Advanced knowledge of LogicMonitor, Splunk, or similar monitoring tools is required, specifically for creating custom data sources and dashboards.
- Ability to design defense-in-depth flows connecting device identity to granular network permissions is required.
- Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders is required.
- Ability to navigate global complexity and translate high-level security requirements into functional network policies is required.
- Ability to manage technical workstreams from concept to production with minimal supervision and take ownership of the network access control product lifecycle is required.
- Ability to mentor less experienced colleagues and provide guidance on cybersecurity best practices and analysis techniques is required.
- Strong facilitation, communication, and conflict-resolution skills are required to align multiple product squads and stakeholder networks.
- Lead high-level and low-level design for global Cisco Identity Services Engine deployments and Wired Access Control strategies.
- Serve as the primary engineer for Palo Alto Next-Generation Firewall architectures, including advanced threat prevention, decryption, and secure egress and ingress traffic management.
- Identify gaps in the security posture and implement technical enhancements to network access control policies, Security Group Tag propagation, and firewall rule sets.
- Implement complex global migrations and new feature rollouts across the network security stack.
- Architect and develop a custom full-stack framework providing a single pane of glass for infrastructure health.
- Build automated integrations with external data sources, including configuration management databases and Internet Protocol address management systems, to maintain a real-time inventory of network assets and security nodes.
- Design logic to ingest and visualize telemetry from Cisco Identity Services Engine, Wired Access Control, and Palo Alto using application programming interfaces, Simple Network Management Protocol, and Syslog.
- Lead complex network security escalations, perform root-cause analysis, and implement long-term automated architectural fixes.
- Develop dashboards and reporting that provide real-time visibility into the connected landscape and identify insecure nodes or unauthorized devices.
- Manage security policies as code and improve automation workflows and cross-platform orchestration to reduce manual operations and ensure consistent security enforcement.
- Design and build self-service capabilities that enable internal teams to consume network security controls autonomously and securely.
- Experience working in highly regulated environments such as pharmaceuticals, healthcare, or finance.
- Proficiency in Terraform and GitHub to design and manage reproducible, version-controlled network security configurations.
- Ability to build continuous integration and continuous delivery pipelines and automated workflows for cross-platform security operations.
- Advanced enterprise networking knowledge, including Layer 2 and Layer 3 networking, Border Gateway Protocol, Open Shortest Path First, Virtual Local Area Networks, and Virtual Extensible Local Area Networks.
- Innovation, curiosity, and research into emerging network security trends and automated enforcement techniques.
About the company
Roche is a global leader in pharmaceuticals and diagnostics. It develops medicines and diagnostic tools that help detect, monitor, and treat diseases, using research and biotechnology to drive new therapies and tests. Roche combines drug development with in-house diagnostic products to support personalized medicine, where treatments are tailored to individual patients based on test results. Its approach differs from many peers by integrating drug discovery with diagnostic capabilities and by expanding its research through strategic acquisitions (like Genentech) to strengthen its biotechnology and R&D capabilities. The company’s goal is to improve patient outcomes and healthcare worldwide by delivering reliable medicines, accurate diagnostic tests, and data-driven care.
Company Size
1-10
Company Stage
IPO
Headquarters
Basel, Switzerland
Founded
1896
Get referred to Roche
See people who can refer or advise you
Simplify's Take
What believers are saying
- Enicepatide delivered 15.5% weight loss in September 2026 and 22.7% in June.
- pTau217 can scale immediately through Roche's existing lab network and improve Alzheimer diagnostics.
- Roche's June 2026 data and September 2026 filings signal multiple obesity shots on goal.
What critics are saying
- Eli Lilly and Novo Nordisk dominate obesity pricing, distribution, and physician mindshare today.
- Enicepatide remains Phase II-only; Roche starts late-stage glycemic and cardiovascular studies in 2027.
- If enicepatide disappoints, Roche burns its $2.7 billion Carmot bet and loses obesity credibility.
What makes Roche unique
- Roche combines pharma, diagnostics, and installed cobas labs across 4,500 U.S. instruments.
- Elecsys pTau217 won FDA clearance on August 24, 2026, and CE marking September 7.
- Roche controls obesity assets from Carmot and Zealand, spanning GLP-1/GIP and amylin.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Performance Bonus
Company News
Roche posted strong Phase 2 results for its weight loss drug enicepatide, showing 22.5% mean weight loss over 48 weeks. This compares favourably to Eli Lilly's Zepbound, which achieved 20.2% weight loss over 72 weeks in a separate trial. In another Phase 2 study, enicepatide demonstrated HbA1c reductions of up to 2.65 percentage points in diabetic patients after 48 weeks, compared to tirzepatide's 2.37 percentage points after 52 weeks. Despite promising results, Roche faces stiff competition from Novo Nordisk and Eli Lilly, which both have deep pipelines in development. Novo Nordisk's CagriSema is nearing approval, whilst Eli Lilly's retatrutide has posted strong Phase 3 results. Roche's revenue grew 6% year over year in the first half of the year to 30.4 billion Swiss francs.
Roche has launched a newborn screening test that simultaneously detects three severe genetic conditions: Spinal Muscular Atrophy, Severe Combined Immunodeficiency Disease, and Sickle Cell Disease. TIB MOLBIOL, a Roche subsidiary, developed the LightMix Newborn TREC/SMN1/HBB kit for use in countries accepting the CE mark. The test enables early detection before symptoms appear, allowing clinicians to initiate life-changing treatments sooner. Early intervention can prevent severe nerve damage in SMA, enable lifesaving bone marrow transplants for SCID, and drastically lower infant mortality in SCD through preventive measures. The IVDR-approved test provides a ready-to-use solution that integrates into existing laboratory workflows. It runs on established LightCycler systems, making it accessible for private and academic hospital laboratories across Europe.
Roche's collaborator MediLink has announced positive phase III results for tambotatug pelitecan (Tam-Peli) in Chinese patients with relapsed small-cell lung cancer. The TAISHAN-302 trial showed Tam-Peli reduced the risk of death by 54% compared to topotecan, with median overall survival of 13.3 versus 9.4 months. The antibody-drug conjugate also demonstrated superior progression-free survival (7.4 versus 2.8 months) and objective response rates (59.1% versus 9.7%). China's National Medical Products Administration has accepted the New Drug Application for filing. Roche is developing and commercialising Tam-Peli outside mainland China, Hong Kong and Macau, with plans to rapidly initiate global trials. The therapy has received Breakthrough Therapy Designations from both the US FDA and China CDE for relapsed small-cell lung cancer.
Tempus AI has raised $600 million in Series C funding to scale its machine learning platform for cancer recurrence detection through liquid biopsies. The investment was led by SoftBank Vision Fund 2, with participation from Roche and Merck. Phase II trial data showed the AI-enhanced liquid biopsy analysis reduced false-negative results by 37% compared to conventional methods. The platform uses deep learning algorithms trained on over 12,000 genomic profiles to identify circulating tumour DNA fragments shed by residual cancer cells. A 2025 Nature Medicine study reported the system achieved 92% specificity in detecting minimal residual disease across breast, lung, and colorectal cancers. According to SEC filings, 45% of funds will support FDA pre-market approval trials, whilst 30% will fund global expansion into EU and APAC markets.
Roche has committed $75 million upfront to acquire global rights to Simcere Pharmaceutical's experimental blood-cancer drug SIM0660. The deal could reach $1.53 billion if the drug meets development, regulatory and commercial milestones, with additional tiered royalties. The agreement grants Roche exclusive development, manufacturing and commercialisation rights outside Simcere's retained markets. The upfront payment represents just 4.9% of the deal's total potential value. SIM0660 remains in preclinical stages. Roche generated CHF11.9 billion in core operating profit during the first half of the year. The company's US-quoted shares fell to $53.55 on Tuesday following the announcement.