Security Expert (L3)

ELCA; Schweiz; Vor Ort; CHF 120.000 - 180.000; Vollzeit

Zusammenfassung

ELCA in Switzerland is seeking a Senior SOC Analyst L3 to lead advanced threat detection and incident response for clients. You will mentor the SOC team and drive improvements in security posture.

Responsibilities include coordinating response, threat hunting, forensic analysis, and creating reports for management. Fluency in English is required; French or German is a plus.

Qualifikationen

• Bachelor's degree in computer science, information security or related field.
• 5+ years of hands-on SOC experience with focus on advanced detection and incident response.
• Experience deploying and running EDR, XDR and SIEM solutions.
• Strong knowledge of networks, Windows and Unix/Linux systems and cloud services.

Aufgaben

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques
• Lead and coordinate incident response, from investigation and containment through eradication and recovery
• Serve as the technical escalation point for L1 and L2 analysts
• Hunt for suspicious activity based on threat intelligence feeds and indicators of compromise
• Improve security monitoring processes so incidents are detected and handled faster
• Perform forensic analysis on complex incidents
• Run regular security assessments and vulnerability scans to find and reduce risk
• Create knowledge base articles for handling medium and high severity incidents
• Work with client IT and security teams on security policies, procedures and best practices
• Write clear reports on incidents, trends and SOC performance for management
• Coach and mentor junior analysts to build their skills

Kenntnisse

SOC experience

Incident response

Reporting

Communication

Cloud services

Networking

Windows

Unix/Linux

Client focus

Team mindset

Ausbildung

Bachelor's degree in Computer Science or Information Security

Tools

EDR

XDR

SIEM

SOAR

Azure

AWS

GCP

Jobbeschreibung

We are looking for a senior SOC Analyst L3 to join our cybersecurity team. You will lead advanced threat detection and incident response for our clients, keep improving their security posture, and act as the technical reference and mentor for the SOC team.

Responsibilities

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques
• Lead and coordinate incident response, from investigation and containment through eradication and recovery
• Serve as the technical escalation point for L1 and L2 analysts
• Hunt for suspicious activity based on threat intelligence feeds and indicators of compromise
• Improve security monitoring processes so incidents are detected and handled faster
• Perform forensic analysis on complex incidents
• Run regular security assessments and vulnerability scans to find and reduce risk
• Create knowledge base articles for handling medium and high severity incidents
• Work with client IT and security teams on security policies, procedures and best practices
• Write clear reports on incidents, trends and SOC performance for management
• Coach and mentor junior analysts to build their skills

Your profile

• Bachelor's degree in computer science, information security or a related field
• 5+ years of hands‑on SOC experience, with a strong focus on advanced detection and incident response
• Experience deploying and running EDR, XDR and SIEM solutions
• Skill with query languages (KQL, SPL or similar), SOAR implementation and product integrations
• Strong knowledge of networks, Windows and Unix/Linux systems, infrastructure and cloud services
• A thorough understanding of the incident response process: detection, triage, analysis, remediation and reporting
• Strong analytical skills and the ability to stay calm under pressure
• Clear communication with both technical and non‑technical people
• A client focus and a team mindset
• Fluent in English, with very good French and/or German
• Cloud environments such as Azure, AWS, GCP, …

Nice to have

• Certifications such as SC‑200, GCIH, GCIA, GCFA, CISSP or CEH
• Scripting in Python, PowerShell or Bash
• Other languages