Remote IT Infrastructure Security Engineer

SII Group Switzerland; Bezirk Olten; Vor Ort; CHF 120.000 - 160.000; Vollzeit

Zusammenfassung

SII Group Switzerland is seeking an IT Infrastructure Security Engineer to lead the scanning program, ensure secure configurations and collaborate with application owners to deliver auditable security controls.

You will configure scans, define conventions, assess applications before scanning and contribute to reporting and documentation. Fluent English is required, German is a plus, and remote work from Switzerland is supported.

Qualifikationen

• Strong understanding of application roles and scanning contexts (anonymous, authenticated, privileged).
• Knowledge of OWASP Top 10 and API Security Top 10, authentication, authorization and session management.
• Proficiency in Python and SQL, with experience handling CSV/JSON data, REST APIs and data analysis; Power BI is a plus.
• Experience with CMDBs, including application/service ownership and data quality management.
• Familiarity with ITSM processes, including change management, incident handling and workflow coordination.

Aufgaben

• Configure, run and tune Tenable WAS scans: templates, scope, exclusions, throttling, scan windows and authenticated scans.
• Define naming and tagging conventions for scans, targets, tags, folders and user groups and document them for consistency.
• Analyze each application before scanning: architecture, auth flow, tech stack, SPA/JS behavior, WAF and bot protection, prod vs non-prod, blast radius.
• Consult application owners, product owners and dev leads on scope, credentials, scan timing and results.
• Prohibit scans without agreed scope and identified owner; ensure credential storage in the corporate store with rotation and least-privilege access.
• Build and maintain the reporting layer: coverage, findings by severity, SLA compliance and remediation trend.
• Maintain the documentation baseline: configurations, scope agreements and credentials handling; ensure auditable, transferable scanning setup.

Kenntnisse

Python

SQL

REST APIs

CSV/JSON data

Data analysis

Tools

Power BI

Jobbeschreibung

SII Group Switzerland is seeking an IT Infrastructure Security Engineer to lead the scanning program, ensure secure configurations and collaborate with application owners to deliver auditable security controls.

You will configure scans, define conventions, assess applications before scanning and contribute to reporting and documentation. Fluent English is required, German is a plus, and remote work from Switzerland is supported.