Senior Security Analyst (f/m/x/d, hybrid set up, 80-100%)

Join a team of security and technology professionals and help Swiss Re to fulfil its mission in making the world more resilient. 

We're looking for an experienced, forward-thinking cybersecurity leader who will manage the production of detection content and incident investigation and help us to improve our incident response techniques. As a Senior Cybersecurity Analyst, you will be monitoring current threats by analysing and handling major cyber incidents, implementing standards and mentoring less experienced analysts.  

What's more, you'll be working in a hybrid setup (50:50), balancing work from home and the office premises (office presence required 2–3 days per week). 

About the team  

 
Group Security & Technology Platforms (GSTP) brings together security, technology platforms and operational resilience to provide secure, reliable and scalable foundations for Swiss Re's business. The function ensures that security, resilience and engineering quality are embedded by design into how technology is built, operated and evolved across the organisation.  

You will be part of the Cyber Defence team – made of passionate individuals who keep the company safe by going above and beyond in terms of preciseness and diligence. We oversee the maintenance of security operations, focusing on delivering high-quality detection monitoring and response solutions. Our team values innovation, collaboration and continuous learning, providing you with a stimulating environment to grow your expertise and make a tangible impact on our cybersecurity practises.    

 
In your role, you will…  
 

Play a pivotal role in safeguarding our organisation's systems and data and lead the charge in: 

• Security monitoring – Oversee security operations, use advanced tools to monitor and analyse alerts, proactively detect incidents in real time, investigate and coordinate responses 

• Incident response – Investigate security incidents, contain breaches and implement remediation strategies 

• Operational excellence – Implement and maintain high operational standards 

• Threat intelligence – Stay updated on cybersecurity threats and trends 

• Team leadership – Mentor and guide a team of cybersecurity analysts, provide technical expertise, foster their development, support their growth and empower them to succeed. Act as a deputy to the Head of Monitoring 

• Security strategy – Develop and implement security policies, procedures and controls to enhance the overall security posture of the organisation 

• Security compliance – Ensure regulatory compliance with industry standards 

• On-call duty – Participate in on-call rotations to address urgent matters outside of regular working hours 

What we need from you… 
 
Nobody is perfect and meets 100% of our requirements. If you, however, meet some of the criteria below and are curious about the world of threat analysis and detection, we'll be more than happy to meet you!  

 
Must-have: 

Qualification & background 

• Min. 5 years of work experience in cybersecurity as a Security Analyst or Incident Responder (preferably in SOC/CSIRT setup) 

• In-depth knowledge of current threat landscape, offensive tooling and OWASP and industry-standard security framework, such as MITRE ATT&CK® techniques and Cyber Kill Chain 

• Experience in malware and exploit analysis (or reverse engineering)  

• Excellent oral and written communication skills in English 

• Additional experience should include: 

• Developing hypothesis-driven threat hunts  

• Analysing various events, including but not limited to web traffic, underlying network protocols, malware, lateral movement TTPs (techniques, tactics, and procedures) or Microsoft and Linux security events  

• Logfile correlation and analysis  

• System and memory analysis  

• Chain of custody and forensic acquisitions  

• Major incident response or breach investigation management  

Personal competencies 

• Excellent analytical and problem-solving skills with attention to detail 

• Effective communication and presentation abilities to articulate and present complex security concepts to both technical and non-technical audiences 

• Stakeholder management experience 

• Demonstrated leadership experience  

• Ability to work well in a fast-paced environment 

Nice-to-have: 

• Degree in Computer Science, Cybersecurity, Information Technology or a related field 

• Experience developing in Python, Kusto or any other scripting language  

• Knowledge of cloud security best practices and experience in cloud environment Azure or Amazon AWS 

• Knowledge of cybersecurity frameworks, such as NIST, ISO or CIS controls. 

• Experience with security tools and technologies such as SIEM, IDS/IPS, EDR, DLP solutions 

• Understanding of threat intelligence  

• Certifications: CEH, CISM, CCSP, CISSP 

For Switzerland the base salary range for this position is between CHF 128,000 and CHF 192,000 (for a full-time role). The specific salary offered considers:

• the requirements, scope, complexity and responsibilities of the role,
• the applicant’s own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.