Senior SOC Automation Engineer - AI-Driven Security (MS XDR)

Myjob; Villigen; Hybrid; CHF 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

International team

Flexible hours/locations

Social benefits

Training opportunities

Modern infrastructure

Zusammenfassung

AO Foundation in Switzerland seeks a Senior IT Security Engineer to lead automating SOC Level 1/2 processes and support advanced incident response. The role focuses on designing and maintaining automated runbooks using Microsoft security tech and AI capabilities for scalable security operations.

You will implement Defender/Endpoint integration, build detection rules in Sentinel/XDR, and work across CI/CD to embed security into IT delivery. English required; German or other languages a plus.

Qualifikationen

• Bachelor's degree required in IT/CS or related field.
• 5+ years in relevant security field.
• Min 2 years hands-on SOC Level 1/2 and Level 3 incident response.
• Programming skills in Python or PowerShell.
• Deep familiarity with Microsoft security products including Sentinel and Defender XDR.
• Strong knowledge of Azure, identity, security architecture, and zero trust principles.

Aufgaben

• Develop and maintain automated SOC Level 1 and 2 runbooks and playbooks.
• Engineer detection rules, workbooks, and playbooks in Microsoft Sentinel/Microsoft XDR.
• Integrate Defender for Endpoint, Identity, Cloud, and Office 365 within the XDR framework.
• Apply AI-driven threat detection and response using Microsoft Copilot for Security.
• Collaborate with teams to embed security into CI/CD pipelines and IT delivery models.
• Provide SOC Level 3 support for complex incidents including forensic analysis.
• Contribute to the DevSecOps organization.
• Support ISO 27000-aligned ISMS and governance/compliance efforts.

Kenntnisse

Python

PowerShell

English proficiency

Ausbildung

Bachelor's degree in Information Technology, Computer Science, or related field

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Microsoft XDR

Jobbeschreibung

AO Foundation in Switzerland seeks a Senior IT Security Engineer to lead automating SOC Level 1/2 processes and support advanced incident response. The role focuses on designing and maintaining automated runbooks using Microsoft security tech and AI capabilities for scalable security operations.

You will implement Defender/Endpoint integration, build detection rules in Sentinel/XDR, and work across CI/CD to embed security into IT delivery. English required; German or other languages a plus.