InfoSec Engineer for Secure Computing (K8s)

CSCS; Ticino; On-site; CHF 110,000 - 160,000; Full time

Benefits offered by this job

Family-friendly environment

Flexible working conditions

Childcare support

Diversity & inclusion

Job summary

CSCS, a Swiss research computing centre, is expanding its security capabilities by hiring two Information Security Engineers for an initial two-year contract. Preferred base in Lugano, with Zurich as an alternative, working to strengthen CSCS’s security posture across infrastructure and research environments.

You will design and operate security controls, monitor threats, lead vulnerability management, and secure containerised and Kubernetes-based environments, collaborating with multiple teams

Qualifications

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting/automation (Python or similar).
• Ability to communicate clearly with technical and non-technical stakeholders.
• Proactive mindset and ability to work independently.

Responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate, and respond to security incidents using SIEM platforms and other security tools, including on-call duties where applicable.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating where beneficial.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training, and engagement across the organisation and user community.

Skills

Security operations

Incident response

Threat hunting

Vulnerability management

Kubernetes

Linux scripting

Communication

Proactive mindset

Tools

Wazuh

Kubernetes

Linux

Python

Job description

CSCS, a Swiss research computing centre, is expanding its security capabilities by hiring two Information Security Engineers for an initial two-year contract. Preferred base in Lugano, with Zurich as an alternative, working to strengthen CSCS’s security posture across infrastructure and research environments.

You will design and operate security controls, monitor threats, lead vulnerability management, and secure containerised and Kubernetes-based environments, collaborating with multiple teams