Cyber Security Analyst (80-100%)

Swissgrid AG; Aarau; Vor Ort; CHF 110.000 - 150.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

Training support

Near Aarau station

Zusammenfassung

Swissgrid AG in Aarau seeks a Cyber Security Analyst to join the Cyber Defense Center and protect the Swiss electricity grid. You will apply threat modelling, develop SIEM use cases, and coordinate countermeasures during security incidents.

You will analyze threats, lead incident response efforts, and collaborate with SOCs and CERTs across critical infrastructure, including on-call rotations throughout the year.

Qualifikationen

• At least 3–4 years of hands-on experience as a SOC Analyst or Incident Responder.
• Degree in Information Security, Information Technology, or a related field.
• Understanding of industrial control systems (ICS); knowledge of substations is a plus.
• Familiar with SIEM, EDR, or NDR technologies.
• Strong incident analysis and triage capabilities.
• Experience with scripting languages (PowerShell, Bash, Python).

Aufgaben

• Join the Cyber Defense Center and contribute to its evolution.
• Perform threat modelling and create new SIEM use cases.
• Analyze attacks, develop countermeasures, and coordinate responses during security incidents.
• Further develop the incident response process.
• Conduct forensic analyses and threat hunting on compromised systems.
• Stay updated on the global threat landscape in energy sectors.
• Lead engineering projects and improve or introduce tools.
• Maintain communication with SOCs and CERTs of other critical infrastructure operators and authorities.
• Participate in on‑call duty (6–8 weeks per year).

Kenntnisse

SOC Analyst experience

Incident response

Threat hunting

English fluency

Ausbildung

Degree in Information Security/IT

Tools

PowerShell

Bash

Python

Jobbeschreibung

Electricity flows with us. On behalf of Switzerland and in cooperation with international partners, we do our utmost every day to develop the best solutions for the Swiss electricity grid. If you want to help protect IT and OT networks in our Cyber Defense Center and contribute to Switzerland’s energy security, we look forward to your application as a:

Cyber Security Analyst (80-100%)

Help keep Switzerland's lights on

Your Responsibilities

• You are a member of the Cyber Defense Center, applying your skills and actively contributing recommendations for its further development
• You perform threat modelling and identify new SIEM use cases
• You analyse attacks, develop countermeasures, and coordinate them during a security incident
• You further develop the incident response process
• You conduct forensic analyses on compromised systems and actively hunt for threats (threat hunting)
• You stay up to date on the international threat landscape, especially in the energy sector
• You lead engineering projects and improve existing tools or introduce new ones
• You maintain active communication with SOCs and CERTs of other critical infrastructure operators and authorities
• You participate in on‑call duty (approx. 6‑8 weeks per year)

What Makes You Stand Out

• You bring at least 3–4 years of hands‑on experience as a SOC Analyst and/or Incident Responder
• You hold a degree in Information Security, Information Technology, or a related field
• You have an understanding of industrial control systems (ICS) and knowledge of technical issues in substations is an advantage
• You are well‑versed in technologies such as SIEM, EDR, or NDR
• Analysing and triaging security incidents is part of your skill set
• You have experience using consoles and scripting languages (PowerShell, Bash, Python)
• You enjoy tackling challenges and solving serious problems, without forgetting the importance of humour
• Team spirit is important to you, and you enjoy working in a diverse environment
• You speak very good English; German skills are an advantage

What We Offer

• Varied and exciting tasks in a company unique in Switzerland.
• Independent and flexible working hours (42 hours per week).
• 25–30 vacation days plus company holidays between Christmas and New Year.
• A state‑of‑the‑art work environment close to Aarau train station.
• Opportunities for professional development.
• Financial and/or time support for internal or external training.

About Us

The Cyber Security team at Swissgrid monitors the infrastructure of the Swiss electricity grid operator and responds to security incidents. We continuously observe the evolving threat landscape and develop effective countermeasures — it’s part of our daily routine.

We look forward to receiving your application and getting to know you!