Cyber Defense Analyst: Threat Hunting & SIEM (Flexible)

Swissgrid; Aarau; Vor Ort; CHF 110.000 - 140.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

25-30 vacation days

Training and pension support

Modern work environment near Aarau

Zusammenfassung

Swissgrid is seeking a Cyber Security Analyst to join its Cyber Defense Center (80-100%). You will apply threat modelling, develop SIEM use cases, and coordinate countermeasures during security incidents.

You will lead engineering projects, perform forensic analyses, hunt threats, and stay current with the international threat landscape in the energy sector. English is required; German is a plus.

Qualifikationen

• 3-4 years of hands-on SOC/incident response experience.
• Degree in Information Security, IT, or related field.
• Understanding of ICS; knowledge of substations is a plus.
• Proficient in SIEM/EDR/NDR technologies.
• Experience with scripting languages (PowerShell, Bash, Python).
• Strong analytical and problem-solving skills; team player with good communication.

Aufgaben

• Join the Cyber Defense Center and contribute to its development.
• Perform threat modelling and develop SIEM use cases.
• Analyse attacks, develop countermeasures and coordinate them during incidents.
• Develop and improve the incident response process.
• Conduct forensic analyses and threat hunting.
• Stay updated on international threat landscape in energy sector.
• Lead engineering projects and improve tools or introduce new ones.
• Communicate with SOCs and CERTs of other operators and authorities.
• Participate in on-call duty (approx. 6-8 weeks per year).

Kenntnisse

SOC Analyst

Incident Responder

Scripting (PowerShell Bash Python)

English communication

Ausbildung

Degree in Information Security/IT or related field

Tools

SIEM

EDR

NDR

Jobbeschreibung

Swissgrid is seeking a Cyber Security Analyst to join its Cyber Defense Center (80-100%). You will apply threat modelling, develop SIEM use cases, and coordinate countermeasures during security incidents.

You will lead engineering projects, perform forensic analyses, hunt threats, and stay current with the international threat landscape in the energy sector. English is required; German is a plus.