InfoSec Engineer — Secure Compute & Threat Detection Lugano

ETH Zurich; Zürich; In loco; CHF 110.000 - 150.000; Part-time

Descrizione del lavoro

CSCS, the Swiss National Supercomputing Centre, is expanding its security team with two Information Security Engineer positions to strengthen its Secure Computing Environment and ongoing ISO/IEC 27001 effort. The preferred location is Lugano, with Zürich also considered, and the roles are initially two-year contracts.

You will design and operate security controls, monitor threats with Wazuh SIEM, manage vulnerability programs, and secure Kubernetes/containerised environments, collaborating

Competenze

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting and automation (Python or similar; detection-as-code is a plus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.
• Fluent English.

Mansioni

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Conoscenze

Security operations

Wazuh SIEM

MITRE ATT&CK

Vulnerability management

Kubernetes security

Python scripting

English fluency

Strumenti

Kubernetes

Linux

Descrizione del lavoro

CSCS, the Swiss National Supercomputing Centre, is expanding its security team with two Information Security Engineer positions to strengthen its Secure Computing Environment and ongoing ISO/IEC 27001 effort. The preferred location is Lugano, with Zürich also considered, and the roles are initially two-year contracts.

You will design and operate security controls, monitor threats with Wazuh SIEM, manage vulnerability programs, and secure Kubernetes/containerised environments, collaborating