Security Operations Engineer – SIEM, Kubernetes, Cloud

ETH Zurich; Ticino; Hybrid; CHF 110,000 - 150,000; Full time

Benefits offered by this job

Flexible working arrangements

Childcare facility in Lugano

Summer camp funding

Family-friendly policies

Diversity and inclusion

Job summary

ETH Zurich is seeking two Information Security Engineers to strengthen CSCS security operations. The roles focus on building and operating a Secure Computing Environment for regulated data, combining threat monitoring, incident response and vulnerability management.

The positions are initially two‑year contracts, with potential extension or permanence depending on funding and needs. Preferred location is Lugano, with Zurich also considered; on‑site work is required in a collaborative,

Qualifications

• Hands‑on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and investigations.
• Experience with SIEM technologies (Wazuh or comparable).
• Solid understanding of MITRE ATT&CK framework and TTPs.
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and scripting/automation (Python or similar).
• Ability to communicate clearly with technical and non‑technical stakeholders.
• Proactive mindset with strong analytical skills and independence.

Responsibilities

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate and respond to security incidents using SIEM platforms and on‑call duties where applicable.
• Extend security monitoring to the Secure Computing Environment; onboard log sources and manage retention.
• Conduct threat hunting and security investigations using MITRE ATT&CK.
• Lead and coordinate vulnerability management including remediation tracking and risk assessment.
• Secure containerised and Kubernetes environments, integrating security across the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities; automate where useful.
• Collaborate with internal teams to prevent and mitigate security risks.
• Promote a strong security culture through awareness initiatives and training across the organisation.

Skills

Security operations

Security monitoring

Incident response

SIEM (Wazuh)

MITRE ATT&CK

Vulnerability management

Kubernetes security

Container security

Python scripting

Stakeholder communication

Job description

ETH Zurich is seeking two Information Security Engineers to strengthen CSCS security operations. The roles focus on building and operating a Secure Computing Environment for regulated data, combining threat monitoring, incident response and vulnerability management.

The positions are initially two‑year contracts, with potential extension or permanence depending on funding and needs. Preferred location is Lugano, with Zurich also considered; on‑site work is required in a collaborative,