Information Security Engineer

About the role

CSCS builds the compute and data infrastructure behind Switzerland's computational science, and is expanding it to handle sensitive data such as medical data through a Secure Computing Environment. It is building an ISO/IEC 27001-certified information security management system and is hiring two Information Security Engineers to strengthen its security operations. The positions are initially offered on a two-year contract, funded by ETH Zurich's HPCN-28 initiative, with possible extension to permanent status depending on needs and funding. The preferred location is Lugano, though Zrich may also be considered.

Key responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other tools, including on-call duties.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention and run circuit-breakers and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead vulnerability management, covering identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating where it makes sense.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training and engagement.

Required profile

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations.
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Fluent English; clear communication with technical and non-technical stakeholders.
• Nice to have: threat intelligence platforms, AI security knowledge, research/HPC or distributed computing experience, and certifications such as CISSP or GIAC.

Required skills

• SIEM technologies (Wazuh or comparable)
• Solid Linux skills and scripting and automation (Python or similar); detection-as-code is a plus
• MITRE ATT&CK framework and modern TTPs

What we offer

• A family-friendly workplace with childcare facilities in the Lugano building, support for up to three weeks of summer camp and coverage of in-home childcare costs for Lugano employees.
• A diverse, inclusive engineering team and a culture built on curiosity, openness, courage, supportiveness and integrity.