Cyber Defense Analyst – Protect Switzerland’s Grid (Flexible Hours)

Swissgrid; Aarau; Remote; CHF 110,000 - 150,000; Full time

Benefits offered by this job

Flexible hours

25–30 days vacation

Great location near Aarau station

Training support

Development opportunities

Job summary

Swissgrid is seeking a Cyber Security Analyst (80-100%) to protect Switzerland’s energy infrastructure. You will be part of the Cyber Defense Center, conduct threat modelling, develop SIEM use cases, and coordinate responses to security incidents.

The role requires 3–4 years in SOC/IR, a relevant degree, and hands-on skills with SIEM/EDR/NDR. English is essential, German is a plus, and on-call duties apply.

Qualifications

• At least 3–4 years hands-on SOC or incident response experience.
• Degree in Information Security, IT, or a related field.
• Understanding of ICS and substations is a plus.
• Experience with SIEM, EDR, or NDR.
• Experience with PowerShell, Bash, and Python.

Responsibilities

• Perform threat modelling and identify new SIEM use cases.
• Analyse attacks, develop countermeasures, and coordinate during incidents.
• Develop and improve the incident response process and conduct forensics.
• Stay up to date on the international threat landscape in energy.
• Lead engineering projects and improve existing tools.
• Maintain active communication with SOCs and CERTs of other operators.
• Participate in on-call duty (6–8 weeks per year).

Skills

SOC Analyst

Incident Responder

Threat hunting

PowerShell

Python

Bash

English fluency

German skills

Education

Information Security or IT degree

Tools

SIEM

EDR

NDR

Job description

Swissgrid is seeking a Cyber Security Analyst (80-100%) to protect Switzerland’s energy infrastructure. You will be part of the Cyber Defense Center, conduct threat modelling, develop SIEM use cases, and coordinate responses to security incidents.

The role requires 3–4 years in SOC/IR, a relevant degree, and hands-on skills with SIEM/EDR/NDR. English is essential, German is a plus, and on-call duties apply.