InfoSec Engineer: SIEM, Threat Hunting & Kubernetes

ETH Zurich; Ticino; On-site; CHF 90,000 - 130,000; Full time

Job summary

ETH Zurich in Lugano is seeking an Information Security Engineer to protect CSCS services, infrastructure and research environments. You will work with infrastructure, platform and application teams to strengthen the security posture and maintain a secure operating environment.

The role covers threat hunting, vulnerability management, and securing Kubernetes/containerized environments, with emphasis on monitoring, automation and collaboration across teams. English proficiency is required.

Qualifications

• Hands-on experience in security operations or security engineering.
• Experience with SIEM technologies (Wazuh or comparable).
• Strong knowledge of MITRE ATT&CK and TTPs.
• Proven vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting/automation (Python or similar).
• Ability to communicate clearly with technical and non-technical stakeholders.
• Proactive mindset and ability to work independently.
• Fluent English.

Responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.

Skills

Security operations

Security engineering

SIEM

MITRE ATT&CK

Vulnerability management

Kubernetes security

Python scripting

Communication

Proactive mindset

Fluent English

Tools

Wazuh

Kubernetes

Python

Job description

ETH Zurich in Lugano is seeking an Information Security Engineer to protect CSCS services, infrastructure and research environments. You will work with infrastructure, platform and application teams to strengthen the security posture and maintain a secure operating environment.

The role covers threat hunting, vulnerability management, and securing Kubernetes/containerized environments, with emphasis on monitoring, automation and collaboration across teams. English proficiency is required.