Senior Security Operations Engineer

Jobgether SRL; Schweiz; Remote; CHF 120,000 - 150,000; Full time

Benefits offered by this job

Fully remote

Health and pension benefits

Wellness days and volunteer time off

Birthday off

Recognition programs

Growth opportunities

Job summary

Jobgether SRL is seeking a Senior Security Operations Engineer based in Switzerland to transform advanced security research into scalable detection content. You will craft production-ready checks, extend detection capabilities across languages, and collaborate with engineering, AI/ML, and infrastructure teams to deploy robust security solutions.

The role emphasizes hands-on research, threat hunting, and building automations within cloud-native CI/CD environments to mitigate evolving attack

Qualifications

• 5+ years of offensive security or application security research experience, or equivalent with relevant degree.
• Strong JavaScript skills and Python preferred.
• Experience with vulnerability classifications and exploitation techniques.
• Experience writing detection logic for web security scanners and related systems.
• Hands-on web app pentesting including OWASP Top 10, REST, GraphQL, and auth/authorization.
• Ability to research complex problems and work with ASTs.

Responsibilities

• Turn offensive security research into production-ready detection capabilities.
• Build and maintain production-grade security checks and detection content.
• Develop new detection rules using OpenGrep and related tools.
• Research vulnerability classes and emergence attack patterns for production detections.
• Extend analysis to new languages and technologies; triage findings and validate results.
• Create evaluation harnesses, benchmarks, and testing frameworks for detection coverage and accuracy.
• Collaborate with engineering, product, AI/ML, and infra teams to deploy detection content.
• Integrate detection, testing, and validation into cloud-native and CI/CD pipelines.

Skills

JavaScript

Python

OWASP Top 10

REST/GraphQL

Cloud/DevOps

English fluency

Threat research

Detection engineering

OpenGrep/Semgrep

LLMs awareness

Team collaboration

Education

Bachelor's degree in CS or related field

Tools

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

YARA

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Operations Engineer based in Switzerland.

Responsibilities

• This role offers the opportunity to turn advanced offensive security research into production-ready detection capabilities for modern application security.
• You will build and maintain security checks designed to identify vulnerabilities, malware, and emerging attack patterns with high accuracy and low false-positive rates.
• The position combines hands-on security research, detection engineering, testing, and continuous experimentation across evolving threat landscapes.
• You will work with technologies including OpenGrep, JavaScript, Python, static analysis, cloud infrastructure, and CI/CD pipelines.
• Your work will also extend into emerging areas such as AI security, LLM vulnerabilities, agentic systems, and MCP security.
• Collaboration spans engineering, product, AI/ML, and infrastructure teams to ensure detection content is effectively developed, tested, and deployed.
• This is a hands-on environment for an experienced security professional who enjoys solving complex problems and improving security capabilities at scale.

• Build and maintain production-ready security checks and detection content with a focus on accuracy, broad coverage, and low false-positive rates.
• Develop new detection rules, primarily using OpenGrep, to identify novel malware and vulnerability patterns.
• Research vulnerability classes, exploitation techniques, and emerging attack patterns and translate findings into effective production detections.
• Extend analysis capabilities to support additional programming languages and evolving application technologies.
• Triage analysis pipeline packages, investigate findings, and validate detection results.
• Develop attack-chain templates that combine lower-severity findings into higher-impact security scenarios.
• Create and maintain evaluation harnesses, benchmarks, and testing frameworks to measure detection coverage, accuracy, false-positive rates, exploit reproducibility, and regression performance.
• Investigate difficult or ambiguous findings and help maintain consistent detection quality across the platform.
• Apply established detection and exploitation principles while contributing to internal standards and methodologies.
• Experiment with new security tools and techniques for detecting threats and malware at scale.
• Monitor developments in application security, offensive security, AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems and incorporate relevant insights into detection engineering.
• Collaborate with engineering, product, AI/ML, and infrastructure teams to develop, test, integrate, and operate detection content.
• Integrate detection, testing, and validation into cloud-native and CI/CD development environments.

Requirements

• 5+ years of experience in offensive security or application security research, or equivalent experience, with a relevant bachelor's degree plus 2 years of experience.
• Broad programming knowledge, with strong JavaScript skills required and Python highly desirable.
• Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomies.
• Experience writing detection logic for DAST scanners, fuzzers, or comparable security systems, including response interpretation and false-positive management.
• Hands-on web application penetration testing experience covering OWASP Top 10 vulnerabilities, authentication, authorization, business logic, REST, GraphQL, and related application security areas.
• Ability to research complex technical problems and work with algorithms and concepts such as Abstract Syntax Trees (ASTs).
• Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is highly valued.
• Familiarity with offensive security tools such as Burp Suite, sqlmap, nmap, ffuf, and custom payload-generation techniques.
• Understanding of HTTP and modern web protocols.
• Familiarity with cloud infrastructure, containers, CI/CD, and modern DevOps practices is advantageous.
• Fluent English communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Strong collaboration skills and good judgment around when to escalate complex or high-impact issues.
• Hands-on mindset, intellectual curiosity, and willingness to investigate both established application security challenges and emerging threats.
• OpenGrep or Semgrep experience, static analysis expertise, production system development experience, or exposure to LLMs and prompt engineering are advantageous.
• Security research contributions such as CVEs, advisories, technical talks, open-source tools, or technical writing experience are a plus.
• YARA experience is also beneficial.

Benefits

• Fully remote working options.
• Health, pension, and statutory benefits tailored to the employee's country of residence.
• 24/7 Employee Assistance Program offering emotional support counseling, life coaching, dependent and elder care, financial and legal support, wellness coaching, and new-parent support.
• Quarterly Thrive-Wellness Days, providing one additional day off each quarter for company-wide rest and renewal.
• 5 days of paid volunteer time off each year.
• Paid birthday day off.
• Employee recognition and rewards programs.
• Opportunities for personal and professional growth and development.
• Flexible, globally oriented Total Rewards approach adapted to regional needs.
• Inclusive and collaborative environment supporting diversity and individuality.