Remote Security Engineer III - SIEM & Detection

Jobgether; Schweiz; Remote; CHF 120,000 - 150,000; Full time

Benefits offered by this job

Remote work: Fully remote

Equity

Minimum 25 days PTO

Coworking access

Team events

Equipment

Home office stipend

Learning budget

Private medical insurance

Other location perks

Onboarding and support

Job summary

Jobgether is seeking a Security Engineer III for Security Operations in Switzerland. You will own detection and response capabilities, build and tune SIEM detections in Elastic and AWS, and automate responses with Python and no-code tools like Zapier or Tines.

The role involves incident investigations, runbook development, and collaboration across a globally distributed team. You will contribute to compliance efforts (SOC 2, PCI DSS), employ Terraform for IaC, and participate in on-call

Qualifications

• Hands-on experience building and tuning SIEM detections.
• Experience securing AWS environments and cloud-native detection and response capabilities.
• Proficiency in Python for scripting, automation, and security tooling.
• Terraform or other infrastructure-as-code technologies.
• Familiarity with MITRE ATT&CK framework and its application to threat detection.
• Experience triaging, investigating, and resolving security incidents.
• Strong written communication to document investigations and risk decisions.
• Ability to work independently and own security outcomes.
• Willingness to participate in on-call rotation.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives.
• Build, tune, and maintain detections across Elastic SIEM and AWS.
• Manage the security investigation queue and triage alerts.
• Document investigations and findings for follow-up actions.
• Develop runbooks and automation workflows using Python and no-code tools.
• Make risk decisions and escalate when needed.
• Support compliance initiatives with audit-ready controls.
• Use Terraform and Python to maintain security tooling infrastructure.
• Participate in on-call rotation for security monitoring.
• Continuously improve coverage and response efficiency.

Skills

SIEM detections

AWS

Python

Terraform

MITRE ATT&CK

Incident response

On-call

Automation

Cloud security

Tools

Elastic SIEM

Zapier

Tines

Job description

Jobgether is seeking a Security Engineer III for Security Operations in Switzerland. You will own detection and response capabilities, build and tune SIEM detections in Elastic and AWS, and automate responses with Python and no-code tools like Zapier or Tines.

The role involves incident investigations, runbook development, and collaboration across a globally distributed team. You will contribute to compliance efforts (SOC 2, PCI DSS), employ Terraform for IaC, and participate in on-call