Cyber Security Specialist

ETH Zurich; Ticino; On-site; CHF 90,000 - 130,000; Full time

Job summary

ETH Zurich in Lugano is seeking an Information Security Engineer to protect CSCS services, infrastructure and research environments. You will work with infrastructure, platform and application teams to strengthen the security posture and maintain a secure operating environment.

The role covers threat hunting, vulnerability management, and securing Kubernetes/containerized environments, with emphasis on monitoring, automation and collaboration across teams. English proficiency is required.

Qualifications

• Hands-on experience in security operations or security engineering.
• Experience with SIEM technologies (Wazuh or comparable).
• Strong knowledge of MITRE ATT&CK and TTPs.
• Proven vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting/automation (Python or similar).
• Ability to communicate clearly with technical and non-technical stakeholders.
• Proactive mindset and ability to work independently.
• Fluent English.

Responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Skills

Security operations

Security engineering

SIEM

MITRE ATT&CK

Vulnerability management

Kubernetes security

Python scripting

Communication

Proactive mindset

Fluent English

Tools

Wazuh

Kubernetes

Python

Job description

Il datore di lavoro è alla ricerca di un/a:

Information Security Engineer - two positions (professione segnalata)

Mansioni:

• svolgerai un ruolo chiave nella protezione dei servizi, dell'infrastruttura e degli ambienti di ricerca del CSCS. - lavorerai a stretto contatto con i team di infrastruttura, piattaforma e applicazione per rafforzare la postura di sicurezza del CSCS e mantenere il suo ambiente operativo resiliente e sicuro.
• progettare, implementare e migliorare continuamente i controlli di sicurezza in tutta l'infrastruttura.
• monitorare, rilevare, analizzare e rispondere agli incidenti di sicurezza utilizzando piattaforme SIEM (ad esempio Wazuh o equivalenti) e altri strumenti di sicurezza, inclusi i turni di reperibilità ove applicabile e in base a un accordo operativo concordato.
• estendere il monitoraggio della sicurezza all'ambiente di elaborazione sicuro: integrare le fonti di log, gestire la conservazione e operare con il circuit breaker e le tracce di audit.
• condurre attività di threat hunting e indagini sulla sicurezza utilizzando framework come MITRE ATT and CK.
• guidare e coordinare la gestione delle vulnerabilità, inclusi identificazione, prioritizzazione, monitoraggio della risoluzione e valutazione del rischio.
• proteggere gli ambienti containerizzati e basati su Kubernetes, integrando la sicurezza in tutto il ciclo di vita della piattaforma.
• sviluppare e mantenere funzionalità di monitoraggio, rilevamento e risposta alla sicurezza, automatizzando laddove opportuno.
• collaborare con i team interni per prevenire, identificare e mitigare i rischi per la sicurezza.
• promuovere una solida cultura della sicurezza attraverso iniziative di sensibilizzazione, sessioni di formazione e coinvolgimento in tutta l'organizzazione e nella nostra comunità di utenti.

Requisiti:

• diversi anni di esperienza pratica in operazioni di sicurezza o ingegneria della sicurezza.
• solida conoscenza del monitoraggio della sicurezza, del rilevamento delle minacce, della risposta agli incidenti e delle indagini sulla sicurezza.
• esperienza con tecnologie SIEM (Wazuh o piattaforme comparabili).
• solida conoscenza del framework MITRE ATT&CK e delle moderne tattiche, tecniche e procedure (TTP) degli avversari.
• comprovata esperienza con processi e strumenti di gestione delle vulnerabilità.
• esperienza nella protezione di ambienti Kubernetes e containerizzati.
• solide competenze Linux e padronanza di scripting e automazione (Python o simili; il detection-as-code è un plus).
• capacità di comunicare in modo chiaro con interlocutori sia tecnici che non tecnici.
• mentalità proattiva, forti capacità analitiche e capacità di lavorare in autonomia.
• Inglese fluente

Requisiti preferenziali:

• esperienza con piattaforme di threat intelligence, processi e difesa basata sulle minacce.
• conoscenza della sicurezza dell'IA, inclusi rischi, governance e controlli per sistemi e carichi di lavoro basati sull'IA.
• esperienza in ambienti di ricerca, accademici, HPC o di calcolo distribuito su larga scala.
• certificazioni pertinenti (ad es. CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).

Dettagli impiego:

• sede di lavoro Lugano
• occupazione al 80 - 100%
• impiego a previo accordo, a tempo determinato al 22.10.2027
• retribuzione salariale da concordare

Documentazione:

• lettera di motivazione
• curriculum vitae (CV)
• certificati e diplomi pertinenti in formato PDF

Ulteriori informazioni sul CSCS sono disponibili sul nostro sito web.

Precisiamo che la preselezione viene effettuata dai responsabili della selezione e non dall'intelligenza artificiale.

Aufgaben-/Stellenbeschreibung

As an Information Security Engineer, you will play a key role in protecting CSCS services, infrastructure and research environments. You will work closely with infrastructure, platform and application teams to strengthen CSCS’s security posture and keep its operating environment resilient and secure.

Your responsibilities will include:

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT end CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Ihr Profil:

• Several years of hands‑on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT and CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.S
• Solid Linux skills and fluency in scripting and automation (Python or similar; detection-as-code is a plus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.
• Fluent English.

Nice to have:

• Experience with threat intelligence platforms, processes and threat-informed defence.
• Knowledge of AI security, including risks, governance and controls for AI-based systems and workloads.
• Experience in research, academic, HPC or large-scale distributed computing environments.
• Relevant certifications (e.g. CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).

You find it works mildly suspicious until you know why it works.

Our core values as guiding principles:

• Curiosity: You enjoy learning, exploring new ideas, and understanding problems deeply.
• Openness: You listen, collaborate, and are receptive to different perspectives.
• Courage: You tackle challenging or ambiguous problems and are willing to take initiative.
• Supportiveness: You help colleagues and users succeed and contribute to a positive team culture.
• Integrity: You act honestly, ethically, and reliably in your work.

We are committed to building a diverse and inclusive engineering team and particularly encourage applications from from groups underrepresented in tech. If you are technically strong, curious, and eager to grow, we want to hear from you.
At CSCS, being family-friendly is much more than a label. We provide flexible and supportive working conditions that help employees manage both their careers and family responsibilities. For example, one of our Lugano buildings hosts a childcare facility, and we financially support up to three weeks of summer camp for primary school children. If your child is sick and you need assistance, we will even cover the cost of in-home childcare for our Lugano based employees. We are proud to be a genuinely family-friendly employer and are committed to supporting our employees when they need it most.
You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
Your job with impact: Become part of ETH Zurich, which not only supports your professional development, but also actively contributes to positive change in society

Neugierig? Sind wir auch.

Further information about CSCS can be found on our website.

We would like to point out that the pre-selection is carried out by the responsible recruiters and not by artificial intelligence.

For recruitment services, the GTC of ETH Zurich apply.