Senior Security Engineer - Workload Security (Hybrid option)

About the Role 

Join Swiss Re’s Cyber Defence organization and help us fulfil our mission of making the world more resilient. As a Senior Security Engineer - Workload Security & XDR, you will play a key role in designing, engineering, and operating security capabilities protecting endpoints, servers, containers, and cloud-native workloads across Swiss Re’s global environment. 

This role combines deep security engineering expertise with a strong knowledge of modern infrastructure and cloud-native technologies. You will work across endpoint detection and response, workload and container security, forensic capabilities, and email and phishing defence, ensuring security controls are scalable, resilient, automated, and effectively integrated into our Cyber Defence ecosystem. 

About the Team 

Cyber Defence is the focal point for security monitoring, detection, protection, and response activities across Swiss Re. 

You will be part of a highly skilled, international engineering team within the Cyber Defence Product & Engineering unit, working closely with Detection Engineering, Incident Response, Threat Intelligence, Cloud Security, and infrastructure and platform teams, to continuously improve prevention, detection, investigation, and response capabilities. 

In this role, you will... 

• Design, engineer, and operate endpoint and workload security capabilities across Windows, Linux, cloud, and containerized environments.  

• Design and operate security capabilities for Linux and Kubernetes workloads, including runtime protection, workload visibility, vulnerability management, and behavioral detection. 

• Develop, tune, and maintain Falco-based runtime detection rules and security policies using platforms such as Sysdig Secure or equivalent container security technologies.  

• Work with enterprise Kubernetes platforms and cloud-native environments such as AKS.  

• Integrate and deploy security capabilities through Helm, Argo CD, GitOps, and CI/CD pipelines, ensuring repeatable and controlled deployments across environments.  

• Partner with Detection Engineering and Incident Response teams to ensure endpoint and workload telemetry supports detection, threat hunting, forensic investigation, and response use cases.  

• Troubleshoot complex security and integration issues across endpoints, Linux workloads, container platforms, APIs, networks, and distributed environments.  

• Act as a senior technical contributor, evaluating new technologies, providing technical direction, design reviews, mentoring, and guidance across engineering initiatives. 

About You 

You are a hands-on security engineer who enjoys solving complex technical problems and building security capabilities that operate reliably at scale. You combine strong technical depth with ownership, collaboration, and the ability to influence technical decisions across teams. 

We are looking for candidates who meet many of the following criteria: 

• Several years of experience in security engineering, EDR/XDR, workload protection, or cloud/container security.  

• Strong knowledge of Windows and Linux security fundamentals.  

• Hands-on experience with Kubernetes and container security, including workloads, nodes, namespaces, RBAC, networking, and runtime behaviour.  

• Practical experience with Sysdig Secure, Falco, or similar workload and runtime security technologies.  

• Experience working with Kubernetes-based container platforms, including enterprise CaaS environments.  

• Experience with Helm, Argo CD, GitOps, Azure DevOps, and CI/CD pipelines.  

• Familiarity with scripting, APIs, and automation using technologies such as PowerShell, Python, or Bash. 

• Good understanding of Azure and cloud security concepts, including identity, networking, workloads, and security controls.  

• Ability to troubleshoot complex issues across operating systems, security technologies, container platforms, and cloud infrastructure.  

• Strong communication skills and the ability to work effectively with technical and non-technical stakeholders.  

Nice to Have 

• Experience with Microsoft Defender XDR, Defender for Cloud, Defender for Identity, or Defender for Cloud Apps.  

• Experience with cybersecurity deception technologies and techniques, such as Canarytokens, honey credentials, or similar solutions, including their deployment and use. 

• Experience with Infrastructure as Code technologies such as Terraform. 

• Exposure to Site Reliability Engineer (SRE) or Platform Engineering practices. 

• Experience with containers workload hardening.  

• Experience integrating security technologies using APIs and automation.  

• Relevant Kubernetes and cloud-native security certifications, such as CKA (Certified Kubernetes Administrator), CKS (Certified Kubernetes Security Specialist) or KCSA (Kubernetes and Cloud Native Security Associate), are a plus 

What We Offer 

• The opportunity to shape security monitoring at global scale in a leading re/insurance company. 

• A flexible hybrid working model balancing office collaboration and remote work. 

• A diverse, inclusive, and international work environment. 

• Strong focus on learning, technical excellence, and career development. 

• Competitive compensation and benefits aligned with Swiss Re standards. 

For Spain the base salary range for this position is between EUR 60,000 and EUR 100,000 (for a full-time role). The specific salary offered considers:

• the requirements, scope, complexity and responsibilities of the role,
• the applicant’s own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.