IT Security Analyst – Cyber Defence Center (CDC)

The Central IT provides IT services for students, researchers, institutes, faculties, and central services of the University of Zurich. For our Cyber Defence Center (CDC), we are looking for a committed IT Security Analyst who will strengthen our operational cyber security and actively contribute to the detection, analysis, and handling of security incidents as well as the further development of our detection and response capabilities.IT Security Analyst -- Cyber Defence Center (CDC)ResponsibilitiesAnalysis, triage, and handling of security alerts and incidents from SIEM, Microsoft Defender XDR, endpoint, network, identity, cloud, and other security sourcesConducting in-depth analyses and threat hunting in the Microsoft Defender portal, especially using Advanced Hunting and KQL or other tools in our SIEMCorrelation and evaluation of events across different systems, log sources, and security productsInvestigation of suspicious activities, attack indicators, and possible compromises as well as initiation of appropriate incident response measuresBlocking and managing indicators of compromise (IOC) such as IP addresses, domains, URLs, or hashes, etc.Further development of detection, hunting, and response use cases in the SIEM as well as within the Microsoft 365 and Defender security platformDevelopment and optimisation of KQL queries, detection rules, alerting logics, and automationsCollaboration in vulnerability management, especially in the assessment, prioritisation, and follow-up of identified vulnerabilitiesContinuous improvement of our security monitoring, detection, and response processes in the CDCDocumentation of incidents, analyses, and measures as well as collaboration in IT security reportingProfileFor this demanding position, we are looking for an analytically strong, independent, and trustworthy individual with enthusiasm for technical security analysis, threat hunting, and incident response.A completed degree, vocational baccalaureate, or higher education in computer science, cyber security, or a comparable qualificationPractical professional experience in security operations, SOC, CDC, incident response, or IT securityVery good knowledge of SIEM systems, security logs, and detection use casesGood knowledge of the Microsoft security platform, especially Microsoft Defender XDR, Defender for Endpoint, Microsoft 365 Security, and Advanced HuntingPractical experience with KQL (Kusto Query Language) for analysing, correlating, and detecting security-relevant eventsExperience in exposure management, including vulnerability managementSound knowledge in the areas of network, endpoint security, identity, and cloud security as well as common attack and detection methodsExperience in analysing and handling indicators of compromise (IOC) and security incidentsScripting skills, for example in PowerShell, Python, or Bash, are an advantageStructured, precise, and efficient working style as well as good analytical and communication skillsGood German and English language skillsWe offerOur employees benefit from diverse and attractive offers.Learn more at: Website Central ITApplication information Further information Questions about the position Sacha Schweizer Head of Cyber Defence Center at UZHAs the largest university in Switzerland, the University of Zurich offers a variety of attractive positions in different academic fields and professional areas. With around 10,000 employees and currently 12 vocational profiles for apprentices, the university provides an inspiring working environment in cutting-edge research and education.Put your talent and skills to use with us.Learn more about UZH as an employer! #J-18808-Ljbffr