IT Security Operation Engineer; m​/w

Location:

Adliswil Workload:
Full-time

Your tasks:

Threat Monitoring Be the main point of contact of the Cyber Fusion Center at the client’s side Support standard Cyber Fusion Center activities such as threat Monitoring, security service management, endpoint detection and Response, vulnerability scanning services)
Investigate/Remediate incident escalated by the Cyber Fusion Center or Client’s internal units

Write specific incident response playbooks for the Client Define, test, deploy or perform specific use cases and correlation rule, threat hunting activities and threat intelligence activities for the client

Support large scale incident response activities

Service improvement

Perform rules tuning of client SIEM in operation

Support rules factory programs in improving the global set of detection

Qualify, analyze, and provide recommendations for new standard data source requests

Support Product teams to build best new services to fit with Operations capabilities

Contribute to client’s security projects

Implement new tools or scripts to increase security operations’ efficiency

General Responsibilities Take responsibility for customer satisfaction and overall success of managed services.

Recommend improvements for Standard Operating Procedures Propose enhancement of tools and workflow

Document actions in tickets to effectively communicate information internally and to customers.

Adhere to policies, procedures, and security best practices.

This role involves:

Being able to integrate and build trust with the client’s team and to work in the client’s environment.

Being at ease working with different teams both in our Security and in the client’s environment

Your profile:

Minimum 3 years’ experience in information security, particularly in cyber operations

Excellent client-facing service skills

Knowledge of incident response processes (detection, triage, incident analysis, remediation and reporting)

Experience with the following technologies: SOAR/SOAR, EDR/NGAV, Vulnerability Scanning, Managed Attacker Deception Experience reviewing and analyzing log data, network packets captures

Strong knowledge of Windows/Linux OS, network protocols, scripting languages

Good knowledge of cloud computing infrastructures and platforms

An excellent knowledge of the security landscape and different security visibility solutions (SIEM based visibility vs EDR)
Professional proficiency in German and English

• Security
• Support
• Testing
• CLOUD
• Ticketing
• Monitoring