Security Engineer & Analyst (Zurich)

About the role

As a Security Engineer & Analyst you will strengthen the cyber‑resilience of our organization. Based in Zurich, you will manage vulnerability and patch processes, expand SIEM and EDR capabilities, and take part in incident response and threat hunting without 24/7 shift work.

Key responsibilities

• Govern the full vulnerability and patch management lifecycle and support risk evaluation and remediation tracking.
• Expand, administer and maintain the SIEM (Elastic) and EDR infrastructure, keeping security‑relevant components up to date.
• Develop new detections, integrations and dashboards to improve visibility across IT and OT environments.
• Triage, investigate and respond to security incidents using defined playbooks, and conduct proactive threat hunting with threat intelligence and behavioral analytics.
• Perform log analysis and correlation to identify anomalies and potential intrusions.
• Apply contractual and regulatory obligations, ensure compliance with internal policies, standards and legal requirements, and report security KPIs.

Required profile

• Bachelor’s or master’s degree in IT or an EFZ apprenticeship with proven cybersecurity experience.
• 3–5 years of experience in information security, preferably in security engineering or operations.
• Strong Linux knowledge, solid understanding of network and endpoint security concepts.
• Familiarity with ISO 27001, NIST or BSI IT‑Grundschutz frameworks.
• Relevant certifications such as CompTIA CySA+, SSCP, Security+, GSEC or equivalent.
• Eligibility or willingness to undergo Swiss security clearance (PSP).
• Business‑fluent in English and German; additional languages are a plus.

Required skills

• Linux
• SIEM (Elastic)
• EDR
• Vulnerability management
• Patch management
• Network security
• Endpoint security
• ISO 27001
• NIST
• BSI IT‑Grundschutz
• CompTIA CySA+
• SSCP
• Security+
• GSEC
• Threat hunting
• Log analysis
• Behavioral analytics