Cyber Security Analyst (80-100%)

Swissgrid; Aarau; Vor Ort; CHF 110.000 - 140.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

25-30 vacation days

Training and pension support

Modern work environment near Aarau

Zusammenfassung

Swissgrid is seeking a Cyber Security Analyst to join its Cyber Defense Center (80-100%). You will apply threat modelling, develop SIEM use cases, and coordinate countermeasures during security incidents.

You will lead engineering projects, perform forensic analyses, hunt threats, and stay current with the international threat landscape in the energy sector. English is required; German is a plus.

Qualifikationen

• 3-4 years of hands-on SOC/incident response experience.
• Degree in Information Security, IT, or related field.
• Understanding of ICS; knowledge of substations is a plus.
• Proficient in SIEM/EDR/NDR technologies.
• Experience with scripting languages (PowerShell, Bash, Python).
• Strong analytical and problem-solving skills; team player with good communication.

Aufgaben

• Join the Cyber Defense Center and contribute to its development.
• Perform threat modelling and develop SIEM use cases.
• Analyse attacks, develop countermeasures and coordinate them during incidents.
• Develop and improve the incident response process.
• Conduct forensic analyses and threat hunting.
• Stay updated on international threat landscape in energy sector.
• Lead engineering projects and improve tools or introduce new ones.
• Communicate with SOCs and CERTs of other operators and authorities.
• Participate in on-call duty (approx. 6-8 weeks per year).

Kenntnisse

SOC Analyst

Incident Responder

Scripting (PowerShell Bash Python)

English communication

Ausbildung

Degree in Information Security/IT or related field

Tools

SIEM

EDR

NDR

Jobbeschreibung

Swissgrid is a technology- and innovation-driven company that focuses on the future of electricity in Switzerland. We have our employees who develop the best possible solutions for the Swiss transmission grid with the highest level of motivation, commitment and quality. They are responsible for the safe operation and the constant further development of the top grid level. Ensuring the safety of people, installations and the environment is the top priority. Our shared awareness that we are working for a critical infrastructure and thus making an important contribution to the high quality of life in Switzerland is what motivates us in our daily work. After all, electricity is crucial for everyday life.

Cyber Security Analyst (80-100%)

Help keep Switzerland's lights on

Your responsibilities

• You are a member of the Cyber Defense Center, applying your skills and actively contributing recommendations for its further development
• You perform threat modelling and identify new SIEM use cases
• You analyse attacks, develop countermeasures, and coordinate them during a security incident
• You further develop the incident response process
• You conduct forensic analyses on compromised systems and actively hunt for threats (threat hunting)
• You stay up to date on the international threat landscape, especially in the energy sector
• You lead engineering projects and improve existing tools or introduce new ones
• You maintain active communication with SOCs and CERTs of other critical infrastructure operators and authorities
• You participate in on-call duty (approx. 6-8 weeks per year)

What makes you stand out

• You bring at least 3-4 years of hands‑on experience as a SOC Analyst and/or Incident Responder
• You hold a degree in Information Security, Information Technology, or a related field
• You have an understanding of industrial control systems (ICS) and knowledge of technical issues in substations is an advantage
• You are well-versed in technologies such as SIEM, EDR, or NDR
• Analysing and triaging security incidents is part of your skill set
• You have experience using consoles and scripting languages (PowerShell, Bash, Python)
• You enjoy tackling challenges and solving serious problems, without forgetting the importance of humour
• Team spirit is important to you, and you enjoy working in a diverse environment
• You speak very good English; German skills are an advantage

What we offer

• Varied and exciting tasks in a company unique in Switzerland
• Independent and flexible working hours (42 hours per week)
• 25-30 vacation days plus company holidays between Christmas and New Year
• A state‑of‑the‑art work environment close to Aarau train station
• Opportunities for professional development
• Financial and/or time support for internal or external training
• Flexible working hours (42 hours a week)
• 25-30 days of holiday, as well as company holiday between Christmas and New Year
• Progressive social benefits and an attractive pension scheme
• Financial support and/or time off for internal or external training courses

About us

The Cyber Security team at Swissgrid monitors the infrastructure of the Swiss electricity grid operator and responds to security incidents.

We continuously observe the evolving threat landscape and develop effective countermeasures --- it's part of our daily routine.

We offer you varied and exciting tasks in a unique company that is responsible for the most critical infrastructure in Switzerland.

Alongside your challenging tasks at Swissgrid, you will benefit from the following advantages:

• Flexible working hours (42 hours a week)
• 25-30 days of holiday, as well as company holiday between Christmas and New Year
• Progressive social benefits and an attractive pension scheme
• Financial support and/or time off for internal or external training courses