Senior Cyber Security Analyst – Threat Detection & Response
As a Senior Cyber Security Analyst in the Swisscom Threat Detection & Response Team, you are a key specialist at the interface between the Security Operations Centre (SOC) and the Computer Security Incident Response Team (CSIRT). You protect our Business Customers by handling complex security incidents quickly and sustainably. With your expertise, you will further develop our detection and response strategies, automate processes, and strengthen the digital resilience of our customers. Responsibilities
Handle escalations within the SOC and support the CSIRT in analysing and managing complex security incidents. Develop and maintain analytical use cases (detection engineering) and integrate cyber threat intelligence into our systems. Conduct proactive threat hunting to identify threats in customers' networks early. Participate in rotating on‑call duty for the SOC and CSIRT. Advise customers directly and conduct technical workshops, including tabletop exercises. Qualifications
University degree in computer science, cyber security, or a comparable qualification. Several years of professional experience in a cyber defence team as a security analyst or incident responder. Strong communication skills in German and English. Experience with Microsoft Defender, Cortex XDR, Splunk, or the ELK stack is advantageous. Programming skills in Python or PowerShell. In-depth knowledge of security concepts such as MITRE ATT&CK, Cyber Kill Chain, and DFIR. Certifications (e.g., CISSP, CompTia SecurityX, Blue Team Level 2, CCD, OSCP) are a plus. Team‑oriented, reliable, independent, and entrepreneurial mindset. Benefits
Choice of working from one of our offices in Switzerland or from home. Flexible working hours to meet personal needs. Attractive benefits, a pleasant working environment, financial rewards, and opportunities for professional development.
#J-18808-Ljbffr
As a Senior Cyber Security Analyst in the Swisscom Threat Detection & Response Team, you are a key specialist at the interface between the Security Operations Centre (SOC) and the Computer Security Incident Response Team (CSIRT). You protect our Business Customers by handling complex security incidents quickly and sustainably. With your expertise, you will further develop our detection and response strategies, automate processes, and strengthen the digital resilience of our customers. Responsibilities
Handle escalations within the SOC and support the CSIRT in analysing and managing complex security incidents. Develop and maintain analytical use cases (detection engineering) and integrate cyber threat intelligence into our systems. Conduct proactive threat hunting to identify threats in customers' networks early. Participate in rotating on‑call duty for the SOC and CSIRT. Advise customers directly and conduct technical workshops, including tabletop exercises. Qualifications
University degree in computer science, cyber security, or a comparable qualification. Several years of professional experience in a cyber defence team as a security analyst or incident responder. Strong communication skills in German and English. Experience with Microsoft Defender, Cortex XDR, Splunk, or the ELK stack is advantageous. Programming skills in Python or PowerShell. In-depth knowledge of security concepts such as MITRE ATT&CK, Cyber Kill Chain, and DFIR. Certifications (e.g., CISSP, CompTia SecurityX, Blue Team Level 2, CCD, OSCP) are a plus. Team‑oriented, reliable, independent, and entrepreneurial mindset. Benefits
Choice of working from one of our offices in Switzerland or from home. Flexible working hours to meet personal needs. Attractive benefits, a pleasant working environment, financial rewards, and opportunities for professional development.
#J-18808-Ljbffr
