Information Security Engineer - two positions

ETH Zurich; Zürich; In loco; CHF 110.000 - 150.000; Part-time

Descrizione del lavoro

CSCS, the Swiss National Supercomputing Centre, is expanding its security team with two Information Security Engineer positions to strengthen its Secure Computing Environment and ongoing ISO/IEC 27001 effort. The preferred location is Lugano, with Zürich also considered, and the roles are initially two-year contracts.

You will design and operate security controls, monitor threats with Wazuh SIEM, manage vulnerability programs, and secure Kubernetes/containerised environments, collaborating

Competenze

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting and automation (Python or similar; detection-as-code is a plus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.
• Fluent English.

Mansioni

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Conoscenze

Security operations

Wazuh SIEM

MITRE ATT&CK

Vulnerability management

Kubernetes security

Python scripting

English fluency

Strumenti

Kubernetes

Linux

Descrizione del lavoro

Information Security Engineer - two positions

80%-100%, Lugano, fixed-term

The Swiss National Supercomputing Centre (CSCS) develops and operates the compute and data infrastructure behind much of Switzerland’s computational science, from climate and weather to materials and large-scale AI. We are now extending the flagship Alps to compute on sensitive data, including medical data and other regulated datasets, through a Secure Computing Environment built for partners whose data must stay inside a tightly controlled perimeter. For that work, trust is what we deliver.

Project background

We are building an ISO/IEC 27001-certified information security management system, first for the Secure Computing Environment and then across the whole centre. Our Management Board and Director have approved a lasting expansion of CSCS’s security capability, and we are growing the team that runs it, starting with two Information Security Engineers to strengthen our security operations.

We have two positions to fill, both initially offered on a two-year contract. The preferred work location is Lugano, although Zürich may also be considered. These positions are funded through ETH Zurich's strategic HPCN-28 initiative, which supports the continued development of key institutional capabilities in line with ETH Zurich's strategic objectives. Following the initial contract period, the contracts may be extended and, subject to organisational needs and funding, could potentially become permanent over time.

Job description

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Profile

Required

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and fluency in scripting and automation (Python or similar; detection-as-code is a plus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.
• Fluent English.

Nice to have

• Experience with threat intelligence platforms, processes and threat-informed defence.
• Knowledge of AI security, including risks, governance and controls for AI-based systems and workloads.
• Experience in research, academic, HPC or large-scale distributed computing environments.
• Relevant certifications (e.g. CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).

You find "it works" mildly suspicious until you know why it works.

We offer

• Curiosity: You enjoy learning, exploring new ideas, and understanding problems deeply.
• Openness: You listen, collaborate, and are receptive to different perspectives.
• Courage: You tackle challenging or ambiguous problems and are willing to take initiative.
• Supportiveness: You help colleagues and users succeed and contribute to a positive team culture.
• Integrity: You act honestly, ethically, and reliably in your work.

Our culture and benefits

We are committed to building a diverse and inclusive engineering team and particularly encourage applications from from groups underrepresented in tech. If you are technically strong, curious, and eager to grow, we want to hear from you.

At CSCS, being family-friendly is much more than a label. We provide flexible and supportive working conditions that help employees manage both their careers and family responsibilities. For example, one of our Lugano buildings hosts a childcare facility, and we financially support up to three weeks of summer camp for primary school children. If your child is sick and you need assistance, we will even cover the cost of in-home childcare for our Lugano based employees. We are proud to be a genuinely family-friendly employer and are committed to supporting our employees when they need it most.

You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.

Your job with impact: Become part of ETH Zurich, which not only supports your professional development, but also actively contributes to positive change in society

We value diversity and sustainability

In line with our values, ETH Zurich encourages an inclusive culture. We promote equality of opportunity, value diversity and nurture a working and learning environment in which the rights and dignity of all our staff and students are respected. Visit our Equal Opportunities and Diversity website to find out how we ensure a fair and open environment that allows everyone to grow and flourish. Sustainability is a core value for us – we are consistently working towards a climate-neutral future.

Curious? So are we.

Questions regarding the position should be directed to Pim Witlox, Unit Head & Senior Architect, [e-mail] (no applications).

We would like to point out that the pre-selection is carried out by the responsible recruiters and not by artificial intelligence.

For recruitment services, the GTC of ETH Zurich apply.

About ETH Zürich

ETH Zurich is one of the world’s leading universities specialising in science and technology. We are renowned for our excellent education, cutting-edge fundamental research and direct transfer of new knowledge into society. Over 30,000 people from more than 120 countries find our university to be a place that promotes independent thinking and an environment that inspires excellence. Located in the heart of Europe, yet forging connections all over the world, we work together to develop solutions for the global challenges of today and tomorrow.