Senior Security Engineer: AI-Driven SOC Automation (Remote)

AO Foundation; Schweiz; Hybrid; CHF 120,000 - 160,000; Full time

Benefits offered by this job

Flexible hours

Hybrid work

Pension and vacation benefits

Professional development

Job summary

AO Foundation in Switzerland is seeking a Security Engineer to lead the automation of SOC Level 1 and Level 2 processes and support advanced incident response. This role is critical to future security operations.

The engineer will design, implement, and maintain automated runbooks using Logic Apps, Power Automate, and AI Foundry components, ensuring scalable and efficient security operations. In this role you will collaborate across teams, contribute to DevSecOps, and help implement an ISO

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• 5 years of professional experience in security operations.
• Minimum 2 years of hands-on SOC Level 1/2 operations and Level 3 incident response.
• Proficient in Python or PowerShell.
• Strong knowledge of Microsoft security products and Azure.
• Fluency in English; German or another language is a plus.

Responsibilities

• Develop and maintain automated SOC runbooks and playbooks.
• Engineer detection rules and playbooks in Sentinel/XDR.
• Integrate Defender for Endpoint/Identity/Cloud with XDR.
• Apply AI-driven threat detection and response.
• Collaborate to embed security into CI/CD and DevSecOps.
• Provide SOC Level 3 support including forensic analysis.
• Contribute to ISMS governance and compliance efforts.

Skills

Python

PowerShell

SOC operations

DevSecOps

English fluency

Education

Bachelor's degree in IT/CS

Tools

Microsoft Sentinel

Defender XDR

KQL

Azure

Logic Apps

Power Automate

Job description

AO Foundation in Switzerland is seeking a Security Engineer to lead the automation of SOC Level 1 and Level 2 processes and support advanced incident response. This role is critical to future security operations.

The engineer will design, implement, and maintain automated runbooks using Logic Apps, Power Automate, and AI Foundry components, ensuring scalable and efficient security operations. In this role you will collaborate across teams, contribute to DevSecOps, and help implement an ISO