Security Expert (L3)

ELCA Information Technology Ltd.; Schweiz; Remote; CHF 90,000 - 130,000; Full time

Job summary

ELCA Information Technology Ltd. in Switzerland is seeking a senior SOC Analyst L3 to join our cybersecurity team. You will lead advanced threat detection and incident response for our clients, build security posture, and mentor the SOC team.

You will detect threats, coordinate responses, perform forensic analysis, and produce reports for management. Fluent English and French/German are desirable, with strong knowledge of EDR/XDR and SIEM.

Qualifications

• Bachelor's degree in computer science, information security or a related field.

Responsibilities

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques.

Skills

SOC experience

Advanced threat detection

Incident response

EDR/XDR/SIEM

Query languages (KQL/SPL)

SOAR integrations

Networking knowledge

Windows/Linux knowledge

IR process understanding

Communication

Client focus

English + French/German

Cloud (Azure/AWS/GCP)

Education

Bachelor's degree in computer science, information security or related field

Tools

EDR

XDR

SIEM

SOAR

Cloud services

Job description

We are looking for a senior SOC Analyst L3 to join our cybersecurity team. You will lead advanced threat detection and incident response for our clients, keep improving their security posture, and act as the technical reference and mentor for the SOC team.

Responsibilities

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques
• Lead and coordinate incident response, from investigation and containment through eradication and recovery
• Serve as the technical escalation point for L1 and L2 analysts
• Hunt for suspicious activity based on threat intelligence feeds and indicators of compromise
• Improve security monitoring processes so incidents are detected and handled faster
• Perform forensic analysis on complex incidents
• Run regular security assessments and vulnerability scans to find and reduce risk
• Create knowledge base articles for handling medium and high severity incidents
• Work with client IT and security teams on security policies, procedures and best practices
• Write clear reports on incidents, trends and SOC performance for management
• Coach and mentor junior analysts to build their skills

Your profile

• Bachelor's degree in computer science, information security or a related field
• 5+ years of hands‑on SOC experience, with a strong focus on advanced detection and incident response
• Experience deploying and running EDR, XDR and SIEM solutions
• Skill with query languages (KQL, SPL or similar), SOAR implementation and product integrations
• Strong knowledge of networks, Windows and Unix/Linux systems, infrastructure and cloud services
• A thorough understanding of the incident response process: detection, triage, analysis, remediation and reporting
• Strong analytical skills and the ability to stay calm under pressure
• Clear communication with both technical and non‑technical people
• A client focus and a team mindset
• Fluent in English, with very good French and/or German
• Cloud environments such as Azure, AWS, GCP, …

Nice to have

• Certifications such as SC‑200, GCIH, GCIA, GCFA, CISSP or CEH
• Scripting in Python, PowerShell or Bash
• Other languages