Cyber Security Analyst (80-100%)

About the role

Join Swissgrid’s Cyber Defense Center and help protect the IT and OT networks that keep Switzerland’s electricity grid running. You will work on threat modelling, incident response and the continuous improvement of security tools.

Key responsibilities

• Perform threat modelling and create new SIEM use cases.
• Analyse attacks, develop counter‑measures and coordinate response during security incidents.
• Develop and refine the incident response process and conduct forensic analyses on compromised systems.
• Conduct threat hunting activities and stay up‑to‑date on the international threat landscape, especially for the energy sector.
• Lead engineering projects to improve or introduce security tools and maintain communication with SOCs and CERTs of other critical infrastructure operators.
• Participate in on‑call duty (approximately 6‑8 weeks per year).

Required profile

• 3–4 years of hands‑on experience as a SOC Analyst or Incident Responder.
• Degree in Information Security, IT or a related field.
• Understanding of industrial control systems (ICS); knowledge of substation technical issues is a plus.
• Strong English skills; German is an advantage.

Required skills

• SIEM, EDR and NDR technologies.
• Scripting with PowerShell, Bash and Python.

What we offer

• Independent and flexible working hours (42 hours per week).
• 25–30 vacation days plus company holidays between Christmas and New Year.
• State‑of‑the‑art work environment close to Aarau train station.
• Opportunities for professional development and support for internal or external training.