Information Security Engineer - two positions

ETH Zurich; Ticino; Hybrid; CHF 110,000 - 150,000; Full time

Benefits offered by this job

Flexible working arrangements

Childcare facility in Lugano

Summer camp funding

Family-friendly policies

Diversity and inclusion

Job summary

ETH Zurich is seeking two Information Security Engineers to strengthen CSCS security operations. The roles focus on building and operating a Secure Computing Environment for regulated data, combining threat monitoring, incident response and vulnerability management.

The positions are initially two‑year contracts, with potential extension or permanence depending on funding and needs. Preferred location is Lugano, with Zurich also considered; on‑site work is required in a collaborative,

Qualifications

• Hands‑on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and investigations.
• Experience with SIEM technologies (Wazuh or comparable).
• Solid understanding of MITRE ATT&CK framework and TTPs.
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting/automation (Python or similar).
• Ability to communicate clearly with technical and non‑technical stakeholders.
• Proactive mindset with strong analytical skills and independence.

Responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms and on‑call duties where applicable.
• Extend security monitoring to the Secure Computing Environment; onboard log sources and manage retention.
• Conduct threat hunting and security investigations using MITRE ATT&CK.
• Lead and coordinate vulnerability management including remediation tracking and risk assessment.
• Secure containerised and Kubernetes environments, integrating security across the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities; automate where useful.
• Collaborate with internal teams to prevent and mitigate security risks.
• Promote a strong security culture through awareness initiatives and training across the organisation.

Skills

Security operations

Security monitoring

Incident response

SIEM (Wazuh)

MITRE ATT&CK

Vulnerability management

Kubernetes security

Container security

Python scripting

Stakeholder communication

Job description

Information Security Engineer - two positions

The Swiss National Supercomputing Centre (CSCS) develops and operates the compute and data infrastructure behind much of Switzerland’s computational science, from climate and weather to materials and large-scale AI. We are now extending the flagship Alps to compute on sensitive data, including medical data and other regulated datasets, through a Secure Computing Environment built for partners whose data must stay inside a tightly controlled perimeter. For that work, trust is what we deliver.

Project background

We are building an ISO/IEC 27001-certified information security management system, first for the Secure Computing Environment and then across the whole centre. Our Management Board and Director have approved a lasting expansion of CSCS’s security capability, and we are growing the team that runs it, starting with two Information Security Engineers to strengthen our security operations.

We have two positions to fill, both initially offered on a two-year contract. The preferred work location is Lugano, although Zürich may also be considered. These positions are funded through ETH Zurich's strategic HPCN-28 initiative, which supports the continued development of key institutional capabilities in line with ETH Zurich's strategic objectives. Following the initial contract period, the contracts may be extended and, subject to organisational needs and funding, could potentially become permanent over time.

As an Information Security Engineer, you will play a key role in protecting CSCS services, infrastructure and research environments. You will work closely with infrastructure, platform and application teams to strengthen CSCS’s security posture and keep its operating environment resilient and secure.

Your responsibilities will include:

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Profile

Required

• Several years of hands‑on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques andprocedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and fluency in scripting and automation (Python or similar; detection-as-code is aplus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.

Nice to have

• Experience with threat intelligence platforms, processes and threat‑informed defence.
• Knowledge of AI security, including risks, governance and controls for AI‑based systems andworkloads.
• Experience in research, academic, HPC or large‑scale distributed computing environments.
• Relevant certifications (e.g. CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).

You find “it works” mildly suspicious until you know why it works.

Workplace

We offer

Our core values as guiding principles:

• Curiosity: You enjoy learning, exploring new ideas, and understanding problems deeply.
• Openness: You listen, collaborate, and are receptive to different perspectives.
• Courage: You tackle challenging or ambiguous problems and are willing to take initiative.
• Supportiveness: You help colleagues and users succeed and contribute to a positive team culture.
• Integrity: You act honestly, ethically, and reliably in your work.

Our culture and benefits:

• We are committed to building a diverse and inclusive engineering team and particularly encourage applications from from groups underrepresented in tech. If you are technically strong, curious, and eager to grow, we want to hear from you.
• At CSCS, being family-friendly is much more than a label. We provide flexible and supportive working conditions that help employees manage both their careers and family responsibilities. For example, one of our Lugano buildings hosts a childcare facility, and we financially support up to three weeks of summer camp for primary school children. If your child is sick and you need assistance, we will even cover the cost of in‑home childcare for our Lugano based employees. We are proud to be a genuinely family‑friendly employer and are committed to supporting our employees when they need it most.
• You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
• Your job with impact: Become part of ETH Zurich, which not only supports your professional development, but also actively contributes to positive change in society

In line with our values , ETH Zurich encourages an inclusive culture. We promote equality of opportunity, value diversity and nurture a working and learning environment in which the rights and dignity of all our staff and students are respected. Visit our Equal Opportunities and Diversity website to find out how we ensure a fair and open environment that allows everyone to grow and flourish. Sustainability is a core value for us – we are consistently working towards a climate‑neutral future .

Curious? So are we.

ETH Zurich is one of the world’s leading universities specialising inscience and technology. We are renowned for our excellent education,cutting‑edge fundamental research and direct transfer of new knowledgeinto society…