IT Security Engineer

LGT Capital Partners AG; Freienbach; Vor Ort; CHF 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Modern working conditions

Diverse culture

Professional development

Language skill support

Princely Family ownership

Zusammenfassung

LGT Capital Partners AG is seeking a Security Engineer to design, implement, and operate security solutions across on-premises and cloud environments. You will integrate security into hardware, software, and cloud deployments while driving vulnerability management and incident response.

Responsibilities include collaborating with the SOC, responding to audits, and updating security policies. Strong knowledge of Microsoft security tools and scripting is essential for success in this role.

Qualifikationen

• Understanding of modern security principles and Zero Trust concepts.
• Experience with Microsoft security stack (Entra ID/Azure AD, Defender, Sentinel).
• Hands-on deploying and managing Microsoft Sentinel in enterprise environments.
• Strong KQL for threat hunting and log analysis.
• Experience integrating data sources via connectors and ASIM schemas.
• Knowledge of cost optimization for security logs and analytics.

Aufgaben

• Design, implement and operate security solutions for on-prem and cloud infrastructure.
• Integrate security into hardware, software and cloud service deployments.
• Define system security requirements compliant with policies and best practices.
• Mitigate vulnerabilities and automate security processes.
• Lead vulnerability management and coordinate remediation with teams.
• Collaborate with external SOC to enhance detection and incident workflows.
• Respond to security incidents, pen tests, and audits.
• Analyze infra and cloud logs for trends and incidents.
• Update cyber security policies, architectures and guidelines.
• Act as SME in CSIRT or security team and own security products.

Kenntnisse

Zero Trust

Threat detection

Active Directory

Azure AD

Defender family

Kusto (KQL)

Scripting (PowerShell)

Security tooling

Vulnerability mgmt

Cross-functional collab

Tools

Microsoft Sentinel

Jobbeschreibung

Job Description

As a Security Engineer, you ensure that technical solutions across our environment are designed, implemented, andoperatedin line with our security requirements. Your main tasks include:

• Research,designand implement security solutions for all managed components within LGT Capital Partners' on-premises and cloud infrastructure;

• Ensure that security is integrated into the evaluation, selection, deployment and configuration of hardware,softwareand cloud services;

• Identifyand define system security requirements thatcomply withall applicable security policies, regulatoryrequirementsand industry best practices;

• Develop technical solutions to mitigate security vulnerabilities and automate repeatable security processes;

• Operate and improve the vulnerability management process, including assessment of findings,prioritizationand coordination of remediation activities with responsible teams;

• Closely collaborate with ourexternal Security OperationsCenter(SOC)to enhance detection use cases, improverunbooksandoptimizeincident workflows;

• Assistin responding to security incidents, penetration tests, red-team exercises and audits;

• Analyzeinfrastructure,cloudand security logs toidentifytrends,deviationsand potential security incidents;

• Support the review and update of cyber security policies, architectures,standardsand guidelines;

• Act as a Subject Matter Expert within virtual teams such as the CSIRT or the Security Team;

• Take over service ownership of security-related products such as endpoint and identity security solutions;

• Prepare clear and concise technical documentation.

Requirements

• Thorough understanding of modern security principles, Zero Trust concepts, threat detectiontechniquesand current attack vectors;

• Proven experience with Microsoft technologies (Active Directory, Group Policy Management, Entra ID / Azure AD, Conditional Access, Identity Protection);

• Proven experience with Microsoft Cloud Security Solutions (Microsoft 365 Defender, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Microsoft Sentinel);

• Hands-onexperiencedeploying,configuring, andadministeringMicrosoft Sentinel inenterpriseenvironments,includingworkspacesetup,dataconnectoronboarding, andcost/retentionmanagement;

• Strong command of Kusto Query Language (KQL) for threat hunting, log analysis, and building complex, multi-table queries;

• Experience connecting data sources via nativeconnectors,third-party connectors (CEF, Syslog, REST API, custom parsers)andwithASIM (Advanced Security Information Model) normalization schemas and parser development;

• Knowledge of cost optimization strategies: auxiliary log tiers, ingestion-time filtering, and analytics vs. basic log strategies;

• Hands-on experience collaborating with cross-functional teams ( Cloud, DevOps, Endpointetc) to triage, prioritize, and remediate security findings and misconfigurations surfaced through Microsoft security tooling, including Secure Score, Exposure Score, Defender for Cloudetcmanaging recommendations across identity, cloud, and device workloads through to closure;

• Experience with vulnerability scanning, risk assessment, exploitationtechniquesand remediation processes;

• Strong automation and scripting skills (e.g., PowerShell, Python) and the ability to build repeatable and scalable security controls;

• Solid problem-solving and troubleshooting skills with the ability toanalyzecomplex environments;

• Ability tointerface withand earn the trust of stakeholders at all levels of the company;

• Demonstrated judgment, sense of urgency, and commitment tohigh standardsof ethics, compliance, customerserviceand business integrity.

What you can expect

• We provide modern working conditions, including work-from-home options, flexible hours and a home office allowance to ensure staff members have a work environment equipped with the latest technology;

• A diverse culture founded on mutual respect, teamwork and appreciation awaits you at LGT Capital Partners. We go the extra mile to generate impact;

• We empower and invest in you: your professional development and personal growth are our priority. We offer various internal and external training opportunities that are aligned with your ambitions and our business needs. If you are interested, you can also enhance your German or English language skills;

• We are proud to be owned by the Princely Family of Liechtenstein and our company is inspired by its entrepreneurial spirit;

• Commitment to ESG: our approach to business is influenced by the Princely Family's long-term perspective. Sustainability is key for us and has shaped our actions since 2002;

• You benefit from favorable terms and conditions if you wish to participate in LGT Capital Partners' investment programs or to use LGT banking products and services.

Contact Information

If you are interested in becoming an integral part of a successful alternative investment management team in an international, multicultural working environment we will be pleased to get to know you soon.
For further information please contact us.

Alexandra Hohermuth

Human Resources

LGT Capital Partners AG, Pfaaffikon

Contact:

[phone]