Security Engineer - Platforms

About the role

Exeon, a Swiss cybersecurity company based in Zurich, is looking for a Security Engineer in its Solutions team. You will help design the components and data flow of its core products: how data enters, how deployments are configured and operated, and how they scale across very different customer environments, many on-prem and air-gapped. The role is 80-100%, with a preference for candidates who can start as soon as possible, and is open to Germany or Switzerland.

Key responsibilities

• Build tooling and automation to simplify deployment, configuration and lifecycle management of Exeon NDR, Exeon.UEBA, log collection and supporting components.
• Design, build and maintain scalable log ingestion pipelines for network and application logs, including parsing, normalization and validation.
• Deploy and operate Exeon in customer environments (on-prem, private cloud, hybrid), including sizing, performance tuning and troubleshooting.
• Work with customers to understand their data sources, infrastructure constraints and security needs, and turn them into clear requirements for product and engineering teams.
• Contribute to customer support, documentation and runbooks alongside Solutions colleagues.

Required profile

• 3-5 years of experience in systems engineering, data engineering, platform/infrastructure engineering or a similar role.
• Proactive, self-motivated and enthusiastic, comfortable in a high-paced start-up environment and able to solve problems independently.
• Comfortable working in a largely remote team; the team speaks English, and German fluency is appreciated when talking to some customers.
• Degree in Computer Science, Electrical Engineering or equivalent practical experience.

Required skills

• Working knowledge of network and application security and the telemetry relevant to detection.
• UNIX/Linux, including networking, troubleshooting and performance tuning in containerized deployments (Docker and/or Kubernetes).
• Strong programming in Python and Bash (or comparable languages), focused on automation and production-quality code.
• Hands-on experience with data ingestion pipelines (syslog, Logstash/Fluentd/Vector, Elastic stack or similar) with heterogeneous formats and high volumes.
• Nice to have: SIEM/SOAR/detection platforms (Splunk, Sentinel, Elastic Security), network telemetry (NetFlow/IPFIX, Zeek, Suricata), MITRE ATT&CK, and prior customer-facing or professional services experience.

What we offer

• A competitive salary and an appealing benefits package.
• High degree of trust, independence and flexibility, including working hours and place of work (remote or in the office).
• Close collaboration with Security Experts, Data Scientists and Business Professionals, and quick responsibility ownership.