Cyber Defense Analyst – Flexible Hours & Threat Hunting

Swissgrid AG; Aarau; On-site; CHF 110,000 - 160,000; Full time

Benefits offered by this job

Flexible working hours (42h/week)

25–30 vacation days + holidays

Professional development support

Job summary

Swissgrid AG is seeking a Cyber Security Analyst to join the Cyber Defense Center in Aarau. You will work in an on-site role focusing on threat modelling, incident response, and threat hunting to protect the Swiss electricity grid.

The position emphasizes collaboration with global partners and continuous improvement of security measures. You bring 3–4 years of hands-on SOC/Incident Responder experience, a degree in Information Security or IT, and skills in SIEM/EDR/NDR with PowerShell, Bash, or

Qualifications

• 3–4 years of hands-on experience as a SOC Analyst or Incident Responder.
• Degree in Information Security, Information Technology, or a related field.
• Understanding of ICS and substations is an advantage.
• Experience with SIEM, EDR, or NDR; scripting in PowerShell, Bash, Python.

Responsibilities

• Member of the Cyber Defense Center; contribute to its development.
• Perform threat modelling and identify new SIEM use cases.
• Analyse attacks, develop countermeasures, and coordinate during security incidents.
• Further develop the incident response process.
• Conduct forensic analyses on compromised systems and threat hunting.
• Stay updated on international threat landscape in energy sector.
• Lead engineering projects and improve tools or introduce new ones.
• Maintain communication with SOCs and CERTs of other critical infra operators.
• Participate in on-call duty (approx. 6–8 weeks per year).

Skills

SOC Analyst

Incident Response

Threat Hunting

Forensics

Education

Information Security degree

Tools

SIEM

EDR

NDR

Job description

Swissgrid AG is seeking a Cyber Security Analyst to join the Cyber Defense Center in Aarau. You will work in an on-site role focusing on threat modelling, incident response, and threat hunting to protect the Swiss electricity grid.

The position emphasizes collaboration with global partners and continuous improvement of security measures. You bring 3–4 years of hands-on SOC/Incident Responder experience, a degree in Information Security or IT, and skills in SIEM/EDR/NDR with PowerShell, Bash, or