> Markdown version of [/jobs/ext/1951139-cybersecurity-engineer-for-internal-network-defense](https://www.wearedevelopers.com/jobs/ext/1951139-cybersecurity-engineer-for-internal-network-defense). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer For Internal Network Defense

- **Company:** Roche
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Private Networks, Artificial Intelligence, Cloud Computing, Complex Networks, Cyber Security, Computer Networks, Continuous Availability, DDoS Mitigation, Deep Packet Inspection, Github, Internet Protocol Security (IP SEC), Internet Security, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Diagrams, Routing, Network Segmentation, Packet Analyzer, Network Protocols, Ansible, Software Engineering, Scripting, Transport Layer Security, Network Access Control, Firewalls (Computer Science), Infrastructure as Code (IaC), Information Technology, Palo Alto Networks, Data Analytics, Fortinet, Terraform, Api Management, GXP, Cisco
- **Published:** August 6, 2026
- **Apply:** https://www.buscojobs.com.es/cybersecurity-engineer-for-internal-network-defense-en-madrid-ID-365703428

## About the Role

Educational Background: Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related technical field.
Professional Experience: 3+ years of experience in designing, deploying, and supporting Next-Generation Firewalls (NGFW) in large enterprise environments.
Automation Engineering: Proven experience using Ansible, Terraform, or Python to manage network security infrastructure at scale.
Large-Scale Infrastructure: Experience managing security controls in complex, global environments involving thousands of diverse device profiles (IoT, Medical, Corporate).
Regulated Industry: Experience working in highly regulated environments (e.g., Pharmaceuticals, Healthcare, or Finance) is highly preferred.
Technical Skills
Palo Alto Mastery: Deep knowledge of PA-Series, Panorama, App-ID, User-ID, WildFire, and Threat Prevention.
Fortinet Expertise: Extensive hands-on experience with FortiGate, FortiManager, FortiAnalyzer, and the Fortinet Security Fabric.
Security Foundations: Solid understanding of security concepts, trends, and best practices, specifically for "Defense in Depth" within internal networks.
Networking Depth: Strong foundation in core routing/switching, VPN architectures, and network protocols.
Skills below will be considered a plus:
Vendor certifications: Fortinet NSE 4-8 or Palo Alto Networks: PCNSA PCNSE, Cisco CCNP
Cybersecurity certification: CISSP
Infrastructure as Code (IaC): Proficiency in Terraform and GitHub to maintain version-controlled, reproducible security configurations.
Scripting & Integration: Strong skills in Python or Go to build custom API integrations between security platforms and internal orchestration tools.
Governance Frameworks: Familiarity with NIST, IEC *****, ISO *****, and FAIR data principles.
Leadership Skills
Communication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.
Innovation & Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques.
Thriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high-level security requirements into functional network policies.
Self-Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle.
Additional Qualifications
Demonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques
Strong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks
Demonstrated interpersonal, collaborative and commitment to operational excellence skills.

## Description

Chez Roche, vous pouvez être vous-même et être apprécié pour les qualités uniques que vous apportez.Notre culture encourage l'expression personnelle, le dialogue ouvert et les connexions authentiques, où vous êtes valorisé, accepté et respecté pour ce que vous êtes, vous permettant de prospérer tant personnellement que professionnellement.Voici comment nous visons à prévenir, arrêter et guérir les maladies et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir.Rejoignez Roche, où chaque voix compte.La positionThe Network & Perimeter Security product makes Roche's connectivity accessible and secure through actionable, policy-driven processes.The capabilities we provide enable Roche to identify, inspect, and mitigate network-based risks, manage regulatory compliance, and oversee egress/ingress traffic across all layers.Our solutions are primarily instantiated through leading-edge security platforms and automated orchestration.We work closely with Cloud, Infrastructure, and Incident Response teams to provide enterprise visibility into Roche's network security posture.You'll be working within the Network Security Product area.This area is accountable for the end-to-end delivery of solutions-designing, building, and maintaining the technologies that protect Roche networks and the Internet, whether on-prem or cloud-based.This includes continuous improvement of capabilities like Internet Security Stack, DDoS Protection, Site-to-Site Connectivity (VPN), Network Access Control and Deep Packet Inspection to stay ahead of an ever-evolving threat landscape.Job descriptionAs a Senior Cybersecurity Engineer for Internal Network Defense, you will be the primary guardian of our internal environment, protecting our most sensitive segments-from manufacturing plants and research labs to warehouses and corporate offices.Your mission is to architect and enforce robust "East-West" segmentation, preventing lateral movement and securing the diverse environments that drive our core business.This is a technical "implementer" role where you will architect, design, build, and operate high-performance security boundaries using a dual-vendor strategy (Palo Alto and Fortinet).Beyond traditional enforcement, you will champion the adoption of AI-driven insights to identify latent risks and define the safe boundaries for automated security workflows, ensuring our internal network is resilient, compliant, and prepared for machine-speed threats.Job responsibilitiesArchitecture, Design & AI AmbitionSegmentation Strategy: Design, develop and document robust network segmentation architectures leveraging Fortinet and Palo Alto firewalls to meet complex business and security requirements.AI-Driven Risk Discovery: Actively explore and integrate AI opportunities to analyze internal traffic patterns and identify emerging security risks within complex Manufacturing and Lab environments.Automated Guardrails: Define and establish clear boundaries and governance for automated workflows, ensuring that machine-driven policy changes remain within safe, predictable parameters.Solution Blueprints: Create detailed network diagrams, technical design documents, and implementation plans for new segmentation environments (Labs, Manufacturing, Research).Implementation & DeploymentFirewall Engineering: Configure, deploy, and manage Palo Alto Networks (PA-Series, VM-Series) and Fortinet FortiGate firewalls at scale.Centralized Management: Utilize Panorama and FortiManager to enforce consistent security policies, NAT rules, VPNs (IPSec/SSL), and advanced routing features.Infrastructure Evolution: Lead the migration and upgrade of existing internal firewall infrastructure, ensuring zero-downtime transitions in critical environments.3. Operational Excellence & VisibilityTechnical Subject Matter Expertise: Serve as the lead engineer for complex network security escalations, performing deep-packet analysis and root-cause investigations to implement long-term architectural fixes.Validated Environments: Apply security best practices within validated (GxP) environments, ensuring compliance with manufacturing and healthcare regulations.Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security technologies to proactively refine internal defenses.Automation & Orchestration: Manage security policies as code while continuously improving automation workflows and cross-platform orchestration to eliminate manual friction, reduce operational overhead, and ensure consistent, high-speed security enforcement.On-Call Readiness: Available for on-call support on a rotating schedule to ensure the continuous availability and integrity of global edge security services.QualificationsEducation / ExperienceEducational Background: Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related technical field.Professional Experience: 3+ years of experience in designing, deploying, and supporting Next-Generation Firewalls (NGFW) in large enterprise environments.Automation Engineering: Proven experience using Ansible, Terraform, or Python to manage network security infrastructure at scale.Large-Scale Infrastructure: Experience managing security controls in complex, global environments involving thousands of diverse device profiles (IoT, Medical, Corporate).Regulated Industry: Experience working in highly regulated environments (e.g., Pharmaceuticals, Healthcare, or Finance) is highly preferred.Technical SkillsPalo Alto Mastery: Deep knowledge of PA-Series, Panorama, App-ID, User-ID, WildFire, and Threat Prevention.Fortinet Expertise: Extensive hands-on experience with FortiGate, FortiManager, FortiAnalyzer, and the Fortinet Security Fabric.Security Foundations: Solid understanding of security concepts, trends, and best practices, specifically for "Defense in Depth" within internal networks.Networking Depth: Strong foundation in core routing/switching, VPN architectures, and network protocols.Skills below will be considered a plus:Vendor certifications: Fortinet NSE 4-8 or Palo Alto Networks: PCNSA PCNSE, Cisco CCNPCybersecurity certification: CISSPInfrastructure as Code (IaC): Proficiency in Terraform and GitHub to maintain version-controlled, reproducible security configurations.Scripting & Integration: Strong skills in Python or Go to build custom API integrations between security platforms and internal orchestration tools.Governance Frameworks: Familiarity with NIST, IEC *****, ISO *****, and FAIR data principles.Leadership SkillsCommunication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.Innovation & Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques.Thriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high-level security requirements into functional network policies.Self-Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle.Additional QualificationsDemonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniquesStrong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networksDemonstrated interpersonal, collaborative and commitment to operational excellence skills.Qui nous sommesUn avenir plus sain nous pousse à innover.Ensemble, plus de ******* employés à travers le monde sont dédiés à faire progresser la science et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir.Nos efforts aboutissent à plus de 26 millions de personnes traitées avec nos médicaments et plus de 30 milliards de tests réalisés avec nos produits de Diagnostique.Nous nous encourageons mutuellement à explorer de nouvelles possibilités, à favoriser la créativité et à conserver nos grandes ambitions, afin de fournir des solutions de santé qui changent des vies et ont un impact mondial.Construisons ensemble un avenir plus sain.Roche est un employeur offrant l'équité en matière d'emploi.#J-*****-Ljbffr


## Related Videos

- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)