Security Expert (L3)

ELCA Switzerland and Europe; Schweiz; On-site; CHF 110,000 - 150,000; Full time

Job summary

ELCA Switzerland and Europe is seeking a senior SOC Analyst L3 to lead threat detection and incident response for diverse clients. You will act as the technical reference and mentor for the SOC team, driving improvements in detection, response and reporting.

This role emphasizes advanced skills, collaboration with client IT/security teams, and clear communication to management. You will guide L1/L2 analysts, perform forensic analysis on complex incidents, and hunt for threats using threat intel

Qualifications

• Bachelor's degree in computer science, information security or a related field.
• 5+ years of hands-on SOC experience with focus on advanced detection and incident response.
• Experience deploying and running EDR, XDR and SIEM solutions.
• Skill with query languages (KQL, SPL or similar), SOAR implementation and integrations.
• Strong knowledge of networks, Windows and Unix/Linux systems, cloud services.
• Understanding of the incident response process: detection, triage, analysis, remediation and reporting.
• Strong analytical skills and ability to stay calm under pressure.
• Clear communication with both technical and non-technical people.
• Client focus and a team mindset.
• Fluent in English, with very good French and/or German.
• Cloud environments such as Azure, AWS, GCP, etc.

Responsibilities

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques.
• Lead and coordinate incident response from investigation through containment, eradication and recovery.
• Serve as the technical escalation point for L1 and L2 analysts.
• Hunt for suspicious activity based on threat intelligence feeds and IOCs.
• Improve security monitoring processes so incidents are detected and handled faster.
• Perform forensic analysis on complex incidents.
• Run regular security assessments and vulnerability scans to reduce risk.
• Create knowledge base articles for handling medium and high severity incidents.
• Work with client IT and security teams on security policies, procedures and best practices.
• Write clear reports on incidents, trends and SOC performance for management.
• Coach and mentor junior analysts to build their skills.

Skills

Threat detection

Incident response

Mentoring

Communication

Cloud knowledge

Networking

English (fluent)

French (nice to have)

German (nice to have)

Education

Bachelor's degree in computer science or information security

Tools

EDR

XDR

SIEM

KQL

SPL

SOAR

Job description

We are looking for a senior SOC Analyst L3 to join our cybersecurity team. You will lead advanced threat detection and incident response for our clients, keep improving their security posture, and act as the technical reference and mentor for the SOC team.

Responsibilities

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques
• Lead and coordinate incident response, from investigation and containment through eradication and recovery
• Serve as the technical escalation point for L1 and L2 analysts
• Hunt for suspicious activity based on threat intelligence feeds and indicators of compromise
• Improve security monitoring processes so incidents are detected and handled faster
• Perform forensic analysis on complex incidents
• Run regular security assessments and vulnerability scans to find and reduce risk
• Create knowledge base articles for handling medium and high severity incidents
• Work with client IT and security teams on security policies, procedures and best practices
• Write clear reports on incidents, trends and SOC performance for management
• Coach and mentor junior analysts to build their skills

Your profile

• Bachelor's degree in computer science, information security or a related field
• 5+ years of hands‑on SOC experience, with a strong focus on advanced detection and incident response
• Experience deploying and running EDR, XDR and SIEM solutions
• Skill with query languages (KQL, SPL or similar), SOAR implementation and product integrations
• Strong knowledge of networks, Windows and Unix/Linux systems, infrastructure and cloud services
• A thorough understanding of the incident response process: detection, triage, analysis, remediation and reporting
• Strong analytical skills and the ability to stay calm under pressure
• Clear communication with both technical and non‑technical people
• A client focus and a team mindset
• Fluent in English, with very good French and/or German
• Cloud environments such as Azure, AWS, GCP, …

Nice to have

• Certifications such as SC‑200, GCIH, GCIA, GCFA, CISSP or CEH
• Scripting in Python, PowerShell or Bash
• Other languages