Security Engineer

Anates; Genf; On-site; CHF 120,000 - 170,000; Full time

Job summary

Antaes is seeking a Security Engineer for Application & Product Security in Geneva. You will define security requirements, build a security case, and shape the secure development lifecycle across products and teams.

You will integrate SAST/DAST/ SCA tools into CI/CD, drive vulnerability management, and support ISO 27001 certification efforts. A strong security background in software development is essential.

Qualifications

• A university or higher-education degree in computer science.
• At least 5 years of security experience with a strong background in software development and application security.
• Proficiency in Secure SDLC, threat modeling, and OWASP frameworks (Top 10, ASVS, SAMM).
• Experience integrating security tooling into CI/CD pipelines.
• Ability to write verifiable security requirements and build a security case.
• Familiarity with ISO 27001 and certification contexts.
• Knowledge of ED-205 and the ATM domain is a plus.
• CISSP, CSSLP, OSWE or equivalent certifications are an asset.

Responsibilities

• Define and maintain the product security requirements and ensure their traceability through to tests and verification evidence.
• Build and maintain the security case: risk and threat analyses, security architecture, justification of controls and compliance evidence.
• Define and roll out a secure development lifecycle (threat modeling, design reviews, secure coding) and integrate security controls (SAST, DAST, SCA, secrets, SBOM) into CI/CD pipelines.
• Drive vulnerability management and support development teams in remediation.
• Contribute to ISO 27001 certification: policies, procedures, risk register, metrics and internal audits.
• Build the security function as the first Security Engineer: roadmap, tooling, awareness and upskilling of the teams.

Skills

Secure SDLC

Threat modeling

OWASP Top 10/ASVS/SAMM

Security requirements & security case

ISO 27001 knowledge

ED-205 / ATM domain knowledge

Cybersecurity certifications

Education

Bachelor's degree in Computer Science

Tools

CI/CD tooling integration

Job description

Position: Security Engineer - Application & Product Security

Location: Geneva

Activity rate: 100%

Main responsibilities:

You will be in charge of:

• Define and maintain the product security requirements and ensure their traceability through to tests and verification evidence.
• Build and maintain the security case: risk and threat analyses, security architecture, justification of controls and compliance evidence.
• Define and roll out a secure development lifecycle (threat modeling, design reviews, secure coding) and integrate security controls (SAST, DAST, SCA, secrets, SBOM) into CI/CD pipelines.
• Drive vulnerability management and support development teams in remediation.
• Contribute to ISO 27001 certification: policies, procedures, risk register, metrics and internal audits.
• Build the security function as the first Security Engineer: roadmap, tooling, awareness and upskilling of the teams.

Required skills:

• You hold a university or higher-education degree in computer science.
• You have at least 5 years of experience in security, with a strong background in software development and application security.
• You are proficient in Secure SDLC, threat modeling and OWASP frameworks (Top 10, ASVS, SAMM).
• You have already integrated security tooling into CI/CD pipelines.
• You can write verifiable security requirements, structure their traceability and build a security case.
• You know ISO 27001 and are comfortable in a certification context.
• Knowledge of ED-205 and the ATM / navigation aérienne domain is a plus.
• CISSP, CSSLP, OSWE or equivalent certifications are an asset.

Your profile:

• You are autonomous, responsible and committed.
• You have a structured mindset and are comfortable building a function from scratch.
• You know how to convince and win over development teams without hierarchical authority.
• You communicate clearly and concisely.
• You stand out through your curiosity and your drive to understand your environment.
• You work very well in a team.

Languages:

• French: nice to have

Founded in 2007, Antaes is a Swiss management and technology consulting firm and one of Switzerland’s leading consulting companies. Today, more than 320 experienced engineers and consultants share our passion for delivering high-quality solutions to our clients.

With offices in Switzerland, Singapore and France, we support both Swiss and international clients across three main areas:

• Organization and Transformation Consulting
• Information Systems Management

By joining Antaes, you will become part of:

• A dynamic and entrepreneurial team
• A people-oriented environment with personalized career support and development opportunities
• Challenging projects that will help you grow your expertise and expand your professional network
• Regular company events, including team-building activities, meet-ups, workshops and our annual Summer Event
• A company certified @HappyAtWork and committed to a strong CSR strategy, recognized with an EcoVadis Gold Medal in 2025

We sincerely thank all applicants for their interest in Antaes. Please note that only candidates selected for the next stage of the recruitment process will be contacted.

For readability purposes, where gendered wording is used, it is intended to be inclusive of all gender identities.