Information Security Engineer - two positions

ETH Zurich; Lugano; In loco; CHF 120.000 - 160.000; Tempo pieno

Vantaggi offerti da questo lavoro

Childcare facility

Summer camp support

Family-friendly employer

Flexible working conditions

Descrizione del lavoro

The Swiss National Supercomputing Centre (CSCS) at ETH Zürich invites applications for two Information Security Engineer positions. The preferred work location is Lugano, with Zürich also considered.

Contracts initially two years; may be extended or become permanent. You will protect CSCS services and research environments, work with infra, platform, and apps, strengthen security posture, monitor incidents with SIEM tools like Wazuh, perform threat hunting, vulnerability management, secure

Competenze

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations.
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of MITRE ATT&CK and modern adversary TTPs.
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting/automation (Python or similar).
• Ability to communicate clearly with technical and non-technical stakeholders.
• A proactive mindset with strong analytical skills and independence.
• Fluent English.

Mansioni

• Design, implement and improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms.
• Extend monitoring to the Secure Computing Environment and manage log sources.
• Conduct threat hunting and security investigations using MITRE ATT&CK.
• Lead vulnerability management, including prioritisation and remediation tracking.
• Secure containerised and Kubernetes-based environments across the platform.
• Develop and maintain security monitoring, detection and response capabilities.
• Collaborate with internal teams to mitigate security risks.
• Promote a security-aware culture through training and engagement.

Conoscenze

Security operations

Security monitoring

Incident response

SIEM (Wazuh)

MITRE ATT&CK

Vulnerability management

Kubernetes security

Linux scripting

Communication

English fluency

Strumenti

Wazuh SIEM

Kubernetes

Linux scripting

Descrizione del lavoro

The Swiss National Supercomputing Centre (CSCS) develops and operates the compute and data infrastructure behind much of Switzerland’s computational science, from climate and weather to materials and large-scale AI. We are now extending the flagship Alps to compute on sensitive data, including medical data and other regulated datasets, through a Secure Computing Environment built for partners whose data must stay inside a tightly controlled perimeter. For that work, trust is what we deliver.

Project background

We are building an ISO/IEC 27001-certified information security management system, first for the Secure Computing Environment and then across the whole centre. Our Management Board and Director have approved a lasting expansion of CSCS’s security capability, and we are growing the team that runs it, starting with two Information Security Engineers to strengthen our security operations.

We have two positions to fill, both initially offered on a two-year contract. The preferred work location is Lugano, although Zürich may also be considered. These positions are funded through ETH Zurich's strategic HPCN-28 initiative, which supports the continued development of key institutional capabilities in line with ETH Zurich's strategic objectives. Following the initial contract period, the contracts may be extended and, subject to organisational needs and funding, could potentially become permanent over time.

Job description

As an Information Security Engineer, you will play a key role in protecting CSCS services, infrastructure and research environments. You will work closely with infrastructure, platform and application teams to strengthen CSCS’s security posture and keep its operating environment resilient and secure.

Your responsibilities will include:

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Profile

Required

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and fluency in scripting and automation (Python or similar; detection-as-code is aplus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.
• Fluent English.

Nice to have

• Experience with threat intelligence platforms, processes and threat-informed defence.
• Knowledge of AI security, including risks, governance and controls for AI-based systems and workloads.
• Experience in research, academic, HPC or large-scale distributed computing environments.
• Relevant certifications (e.g. CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).

You find “it works” mildly suspicious until you know why it works.

We offer

Our core values as guiding principles:

• Curiosity: You enjoy learning, exploring new ideas, and understanding problems deeply.
• Openness: You listen, collaborate, and are receptive to different perspectives.
• Courage: You tackle challenging or ambiguous problems and are willing to take initiative.
• Supportiveness: You help colleagues and users succeed and contribute to a positive team culture.
• Integrity: You act honestly, ethically, and reliably in your work.

Our culture and benefits:

• We are committed to building a diverse and inclusive engineering team and particularly encourage applications from from groups underrepresented in tech. If you are technically strong, curious, and eager to grow, we want to hear from you.
• At CSCS, being family-friendly is much more than a label. We provide flexible and supportive working conditions that help employees manage both their careers and family responsibilities. For example, one of our Lugano buildings hosts a childcare facility, and we financially support up to three weeks of summer camp for primary school children. If your child is sick and you need assistance, we will even cover the cost of in-home childcare for our Lugano based employees. We are proud to be a genuinely family-friendly employer and are committed to supporting our employees when they need it most.
• You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
• Your job with impact: Become part of ETH Zurich, which not only supports your professional development, but actively contributes to positive change in society

Working, teaching and research at ETH Zurich

We value diversity and sustainability

In line with our values, ETH Zurich encourages an inclusive culture. We promote equality of opportunity, value diversity and nurture a working and learning environment in which the rights and dignity of all our staff and students are respected. Visit our Equal Opportunities and Diversity website to find out how we ensure a fair and open environment that allows everyone to grow and flourish. Sustainability is a core value for us – we are consistently working towards a climate-neutral future.

About ETH Zürich

ETH Zurich is one of the world’s leading universities specialising inscience and technology. We are renowned for our excellent education,cutting-edge fundamental research and direct transfer of new knowledgeinto society. Over 30,000 people from more than 120 countries find ouruniversity to be a place that promotes independent thinking and anenvironment that inspires excellence. Located in the heart of Europe,yet forging connections all over the world, we work together todevelop solutions for the global challenges of today and tomorrow.