Cybersecurity Senior Engineer

Phoeniqs Technologies; Basel; On-site; CHF 140,000 - 190,000; Full time

Job summary

Phoeniqs Technologies is seeking a hands-on Cybersecurity Senior Engineer to design, implement, and operate key security solutions while embedding Swiss and European regulatory frameworks into daily operations.

You will build, automate, and run secure systems across SIEM, EDR/XDR, IDS/IPS, vulnerability management, and PAM/IAM, with a strong focus on risk‑based hardening and continuous compliance.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field.
• Minimum 5+ years hands-on experience in cybersecurity engineering or security operations.
• Proficient English language (full professional).

Responsibilities

• Design, implement, and operate security technologies (SIEM, EDR/XDR, IDS/IPS, vulnerability management, PAM/IAM).
• Monitor alerts, perform threat hunting, manage incident response workflows, and tune detection rules.
• Map regulatory requirements into technical controls and evidence for audits and certifications.
• Collaborate with engineering to integrate security controls into CI/CD, cloud workloads, and deployments.
• Provide security explanations for customer assurance and audits; drive automation and continuous monitoring.

Skills

SIEM/SOAR

EDR/XDR

IDS/IPS

Vulnerability Mgmt

IAM/PAM

CI/CD security

Automation

Python/Bash/Ansible

Cloud security

Threat hunting

Incident response

Education

Bachelor's or Master’s in CS/Info Security

Tools

SIEM

SOAR

PAM/IAM

AWS/Azure/GCP security

Job description

Cybersecurity Senior Engineer

Phoeniqs is seeking a hands‑on Cybersecurity Senior Engineer to join the Engineering organization. This role is responsible for the design, implementation, and operation of key security solutions (SIEM, EDR/XDR, IDS/IPS, Vulnerability Management, PAM, etc.) while ensuring that European and Swiss regulatory frameworks are directly embedded into our technical controls and daily operations.

The ideal candidate combines deep, practical expertise in deploying and managing security architecture with a strong understanding of compliance frameworks. You will build, automate, and operate systems that are secure and compliant by design, turning regulatory obligations into scalable, continuously monitored technical capabilities.

Key Responsibilities

Security Solutions Engineering & Operations (Core Focus):

• Design & Implementation: Architect, deploy, and configure enterprise security technologies including SIEM/SOAR, EDR/XDR, IDS/IPS, Vulnerability Management, and Identity Access Control (PAM/IAM).
• Security Operations & Threat Management: Monitor security alerts, perform threat hunting, manage incident response workflows, and optimize detection rules to reduce noise and lower mean time to detect/respond (MTTD/MTTR).
• Vulnerability & Exposure Management: Operationalize continuous vulnerability scanning, prioritize risk-based patch management, and perform technical risk assessments across cloud, network, and system architectures.
• Automation & Orchestration: Drive security automation (Policy-as-Code, Infrastructure-as-Code, SOAR playbooks) to streamline incident response and continuous monitoring.

Regulatory & Certification Alignment:

• Technical Control Mapping: Operationalize requirements from regulations and frameworks into concrete security tool configurations, architecture patterns, and enforcement policies:
• GDPR and Swiss Federal Act on Data Protection (revDSG)
• NIS2 Directive
• Spanish “Esquema Nacional de Seguridad” (ENS)
• ISO 27001 / 27017 / 27018 & SOC / ISAE frameworks
• EU AI Act (technical/operational implications) and FINMA expectations
• Continuous Compliance Enforcement: Ensure security platforms inherently generate automated, continuously validated, and auditable evidence to support external audits and certifications without manual overhead.
• Control Remediation: Identify gaps between regulatory mandates and actual system behavior, deploying technical controls to bridge any deficiencies.

Cross-Functional Security Enablement:

• Architecture Collaboration: Work with platform and software engineers to integrate security controls directly into CI/CD pipelines, cloud workloads, and deployment workflows.
• Customer & Audit Assurance: Support audit readiness and provide technical explanations of security controls for customer assurance and compliance verification.

Requirements & Profile

Qualifications:

• Education: Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field.
• Experience: Minimum of 5+ years of hands‑on experience as a Cybersecurity Engineer, Security Operations Engineer, or Systems Security Specialist.
• Languages: Full professional proficiency in English (mandatory).
• Technical Expertise:
• Demonstrated track record in designing, deploying, and operating SIEM, EDR/XDR, IDS/IPS, and Vulnerability Management solutions.
• Solid command of network security protocols, system hardening, and cloud security controls (AWS, Azure, or GCP).
• Hands‑on scripting and automation capabilities (Python, Bash, Ansible, etc.).
• Compliance & Framework Knowledge:
• Strong understanding of translating frameworks like ISO 27001, NIS2, ENS, GDPR, or NIST CSF into enforceable technical rules and configurations.
• Mindset: Strong hands‑on, problem‑solving mindset focused on operational excellence, automation, and measurable security outcomes rather than paper compliance.

Desirable / preferred:

• Professional Certifications: Recognized industry security certifications such as CISSP (Certified Information Systems Security Professional), CCSP , CEH , GSEC/GIAC , or vendor‑specific security engineering certifications (e.g., AWS Security Specialist, Azure Security Engineer, CCNP Security).
• Languages: German proficiency (B2 or higher) is a strong plus.