Information Security Engineer (2 Positions)

About the role

CSCS builds an ISO/IEC 27001-certified information security management system for its Secure Computing Environment, which handles sensitive data such as medical data. It is hiring two Information Security Engineers, initially on two-year contracts, with the preferred location in Lugano (Zürich also considered). The contracts can be extended and may eventually become permanent.

Key responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh) and other tools, including on-call duties.
• Extend monitoring to the Secure Computing Environment: onboard log sources, manage retention and run circuit-breakers and audit trails.
• Carry out threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes environments, integrating security throughout the platform lifecycle.
• Automate security monitoring, detection and response where it makes sense.
• Promote a strong security culture through awareness initiatives and training.

Required profile

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and investigations.
• Proven experience with vulnerability management and with securing Kubernetes and containerised environments.
• Fluent English; clear communication with technical and non-technical stakeholders.
• Nice to have: threat intelligence, AI security, research/HPC experience and relevant certifications (e.g. CISSP, GIAC, CKS).

Required skills

• SIEM technologies (Wazuh or comparable)
• Solid Linux skills and scripting/automation (Python or similar; detection-as-code a plus)
• MITRE ATT&CK framework

Applications are submitted online through the CSCS portal with a motivation letter, CV and certificates, addressed to the CSCS HR contact.