Pubblicato su stage4eu il: 05/08/2026 Roche, Cybersecurity Analyst Intern
Roche
Avinguda de la Generalitat, 171, Sant Cugat del Vallès (Barcelona), Spagna
Informatica/ICT, Engineering
Retribuito
Attività:
- Vulnerability Assessment & Analysis: Perform end-to-end security assessments on product components and software stacks, identifying potential security flaws, exposure points, and software risks.
- Automation & AI Integration: Contribute actively to the automation of Software Bill of Materials (SBOM) vulnerability management workflows and help pioneer AI-augmented vulnerability assessment frameworks to scale security operations.
- Cross-Stakeholder Reporting: Translate complex technical vulnerabilities into clear, actionable risk reports for engineering, product management, and leadership teams.
- Product Team Enablement & Remediation Support: Partner directly with product teams to help them comprehend vulnerability root causes and potential impact, collaborate on pragmatic and effective remediation strategies, and assist in prioritizing fixes within development roadmaps.
- Continuous Improvement: Track emerging threat vectors, zero-days, and security industry standards (such as CVSS, NIST, OWASP) to continuously refine assessment criteria and automated tooling.
Requisiti principali:
- - You are a proactive, analytical cybersecurity professional who thrives on solving complex technical challenges and communicating security concepts to both technical and non-technical audiences.
- Experience: Proven experience in threat and vulnerability management, product security, application security, or software security analysis.
- Technical Knowledge: Strong understanding of vulnerability scoring systems (e.g., CVSS), Software Bill of Materials (SBOM) management, software composition analysis (SCA), and common vulnerability frameworks (CVE/CWE).
- Automation & Scripting: Demonstrated ability or strong interest in automating security workflows (e.g., Python, Bash, CI/CD integrations) and applying emerging AI/ML technologies to security assessments.
- Remediation Strategy: Ability to guide engineering teams through root-cause analysis and realistic fix prioritization without compromising delivery velocity.
- Communication & Influence: Excellent written and verbal communication skills, with a track record of building positive, consultative relationships with software and product teams.
Stage4eu is free of charge and has no commercial purpose. It does not conduct brokerage activities, nor does collect CVs. By clicking on the green button “VAI ALL’OFFERTA” you’ll be redirected to the original vacancy posted on host organizations’ web page.