Security Engineer

• Development and maintenance of the Information Security Management System (ISMS)
• Analysis of the threat landscape and derivation of measures from risk analyses
• Active contribution to the implementation of concrete security requirements
• Coordination of security incidents and organization of their handling
• Training for employees
• Definition of security requirements for projects and support with security-related questions
• Organization of technical measures and responsibility for security services and vulnerability management

IT Security Engineer, 80–100%

• Build and manage corporate networks for clients
• Maintain, operate and further develop complex network environments
• Plan, design and operate modern firewall, LAN and WLAN infrastructures
• Analyze faults, independently resolve incidents and manage network-related changes
• Develop automation solutions to increase operational efficiency
• Support sales teams in the pre-sales process with technical expertise

Senior Network Engineer, Security

• Build and further develop the Cyber Threat Intelligence capability of the Swiss FS-CSC
• Work closely with association members, the Federal Office for Cybersecurity (BACS) and other partners
• Analyze current cyber threats, threat actors and their TTPs and IOCs
• Independently produce cyber situational assessments during crises
• Lead and coordinate internal working groups
• Facilitate technical exchanges with members and authorities
• Support strategic and operational cyber exercises
• Report to the board, expert groups and the steering board
• Lead subject-specific working groups, support the execution of national cyber exercises and provide audience-tailored reporting to the board

Cybersecurity Threat Analyst

• Lead and organize the unit, including staff development
• Ensure compliance with occupational safety policies and quality standards
• Responsible for planning, coordinating and overseeing projects in control systems and OT security
• Support the preparation and evaluation of proposals as well as supplier management
• Promote innovation and the continuous development of standards in the field
• Take on project leadership as well as budget and cost control

Head of Control Systems, OT Security

• Sicherstellung des Systembetriebs von leittechnischen Einrichtungen in Unterwerken sowie Unterstützung im Incident- und Störungsmanagement.
• Bearbeitung von Projekten als Teilprojektleiter OT (TPL-OT), inklusive Funktions- und Qualitätssicherung sowie Steuerung und Überwachung interner und externer Leistungen.
• Planung, Engineering und Inbetriebsetzung von Stationsleittechnik und OT-Infrastrukturen.
• Entwicklung und Umsetzung von Security-Lösungen für Netzwerke und OT-Infrastrukturen gemäss Axpo OT-ISMS (ISO 27001/-19).
• Mitwirkung an Digitalisierungs- und Innovationsprojekten zur Optimierung von Engineering-Prozessen.
• Zusammenarbeit mit internen und externen Stakeholdern zur Umsetzung von Sicherheitsstandards.

Projektingenieur Leittechnik, OT-Security

• Du verantwortest das SAP-Berechtigungswesen end-to-end — von der Konzeption über den Rollenbau bis zum laufenden Betrieb.
• Du bist die fachliche Instanz wenn es um Zugriffe, Segregation of Duties und Compliance geht, und arbeitest eng mit Fachbereichen, IT und der Revision zusammen.
• Entwicklung, Pflege und Weiterentwicklung des unternehmensweiten SAP-Berechtigungskonzepts
• Sicherstellung der Segregation of Duties (SoD) und Compliance-Anforderungen inkl. Revisionsunterstützung
• Technischer Aufbau und Pflege von Einzel- und Sammelrollen in SAP S/4HANA
• Benutzer- und Rollenverwaltung inkl. Profilgenerator (PFCG), SU01, SU10
• Analyse und Bereinigung von Berechtigungsproblemen — von ST01-Trace bis zur Ursachenanalyse
• Mitarbeit oder Leitung bei Berechtigungsprojekten — Neukonzeption, Rollouts, S/4HANA-Migrationen
• Einführung oder Weiterentwicklung von GRC-Tools (SAP GRC Access Control) von Vorteil
• Steuerung externer Partner in Berechtigungsprojekten
• Enge Zusammenarbeit mit Fachbereichen, HR, Revision und IT-Security
• Ansprechpartner bei internen und externen Audits rund um SAP-Zugriffsrechte
• Schulung und Sensibilisierung von Key Usern und Prozessverantwortlichen

SAP Berechtigungsmanager, Security Consultant

• Provide technical and personnel leadership for the IT Perimeter Security team of five employees
• Advise customers on cyber security matters
• Support presales activities
• Serve as technical project lead and communicate with customers and partners
• Develop and evaluate new solutions in the cyber security domain

Team Lead IT Perimeter Security Engineering

• Coordinate the preparation of risk analyses in collaboration with various departments
• Support the Safety Compliance Manager in communications with external stakeholders
• Responsible for customer communication on specific projects
• Represent the Safety Compliance Manager on product safety matters

Technical Specialist – Product Safety (Defense)

• Cyber risk management and ensuring compliance with IT GRC requirements
• Conducting cyber risk assessments and designing measures to mitigate risks
• Increasing security awareness across the organization
• Verifying the effectiveness of security measures through regular definition and execution of security tests
• Regularly reviewing existing platforms against best practices and internal policies and guidelines
• Analyzing the impact of the security architecture on security and compliance and continuously developing it further
• Supporting and closely integrating with application projects to implement a "secure-by-design" strategy

Cyber Security Architect, 80-100%

• Strategic growth and further development of the Cloud Security area
• Responsible expansion of cloud security solutions and service offerings
• Advising national clients on cloud topics
• Analyzing and remediating infrastructure, vulnerabilities and threats
• Using the latest technologies in consulting activities
• Being part of a committed and technically proficient team

Cloud Security Architect

• Monitoring the threat landscape and industry trends
• Conducting threat hunting and cybersecurity analyses
• Assessing security risks and proposing mitigation measures
• Working with various security solutions, e.g., EDR and vulnerability management
• Reviewing and developing dashboards and datasets in SIEM
• Supporting and advising teams on security matters

Cyber Security Professional

• Design and implement security requirements in a cloud environment
• Identify, assess, and mitigate cyber security risks
• Define and apply preventive measures to protect cloud infrastructure
• Support cloud projects by assessing protection needs and designing security solutions
• Develop and maintain security concepts, guidelines, and documentation

Cloud Security Engineer

• Protection applicative & WAF : Concevoir, déployer et configurer des solutions de protection applicative.
• Gérer le tuning avancé des règles et la réduction des faux positifs.
• Déployer des protections contre les attaques Web courantes.
• Sécuriser les flux HTTP/HTTPS et gérer les configurations TLS.
• Participer à l’optimisation des flux (ports, accès, filtrage).
• Mettre en place des mécanismes de filtrage basés sur la réputation IP.
• Contribuer à la gestion des vulnérabilités côté exposition applicative.
• Collaborer avec les équipes réseau, sécurité et applicatives.

Ingénieure Sécurité Applicative Senior, AppSec

• Develop engaging training and awareness initiatives to strengthen the bank’s security posture, with a focus on phishing
• Monitor and respond to security threats and incidents
• Conduct phishing simulations and track compliance
• Create and deliver high-quality content to train employees on phishing best practices
• Track employee training and ensure compliance with organizational and regulatory requirements
• Analyze results from training sessions and phishing simulations to identify trends and improvement opportunities
• Analyze security data and prepare reports for senior management on risks and potential vulnerabilities
• Identify opportunities for improvement and recommend changes to ensure compliance with security standards
• Develop and implement policies and procedures to maintain compliance with security standards
• Organize and conduct training sessions and workshops to sustain high phishing awareness and minimize operational risk
• Support company-wide security awareness programs
• Research and evaluate emerging technologies and provide recommendations for implementation

Associate, IT Security — Phishing Awareness

• Own and maintain the Register of Processing Activities (ROPA) — currently established but requiring ongoing expansion and review.
• Ensure compliance with GDPR, Swiss FADP (revDSG), and CCPA requirements across all company operations.
• Manage data subject request (DSR) workflows and ensure timely, compliant responses.
• Own the retention and deletion policy — define, implement, and enforce data lifecycle rules.
• Maintain and improve the company's privacy policies (website, HR, product-level).
• Maintain the processor register and DPA repository.
• Ensure all active vendors/processors have reviewed DPAs with appropriate safeguards (SCCs, Swiss addenda).
• Establish and run an annual vendor review cadence.
• Map and document international data transfers and safeguards.
• Own the company's Technical and Organizational Measures (TOMs) documentation.
• Drive formalization and periodic testing of security controls.
• Coordinate penetration testing with external partners.
• Build toward a security monitoring and incident response capability.
• Own the risk register — maintain it, drive risk owners to close items, report to leadership.
• Evaluate and recommend security tooling (e.g., CVE scanning, static analysis integration, SIEM).
• Track emerging regulatory requirements (AI Act, DORA, NIS2) and assess applicability.
• Prepare the company for potential ISO 27001 or SOC 2 certification when strategically appropriate.
• Coordinate with external legal counsel (currently MLL) on regulatory assessments and policy drafting.
• Respond to customer compliance questionnaires and security assessments.
• Support sales and pre-sales with compliance documentation, certifications overview, and security posture materials.
• Ensure product-level compliance considerations (e.g., OSS license management, SBOM generation) are integrated into engineering workflows.

Information Security Officer – Compliance

• Take ownership of proactive lead generation and pipeline development in Switzerland and Germany
• Identify relevant stakeholders and decision-makers in target companies
• Coordinate initial meetings with our sales team
• Build and maintain your own lead pipeline through structured outbound activities (email, phone, LinkedIn, video)
• Research and engage primarily technical decision-makers (e.g., CISOs, IT managers) within enterprise accounts
• Qualify inbound and outbound leads
• Schedule and prepare presentation meetings
• Work closely with marketing, partners and sales to optimize sales campaigns
• Maintain all activities and contacts in the CRM (HubSpot)
• Represent xorlab at events and webinars
• Actively contribute to and continuously improve our BDR processes and tools, playbooks and best practices

Business Development Representative – Cybersecurity

• Responsible for auditing the bank's technology and security controls
• Collaborate in planning and conducting audits to assess the adequacy and effectiveness of internal controls, including cyber and information security aspects
• Lead audit engagements across the banking group, identify weaknesses in IT processes, test key controls, and perform fieldwork in accordance with internal methodologies
• Act as a trusted partner and critical advisor to line management, advising on remediation until weaknesses are addressed and replaced by efficient, more robust processes that meet standards
• Document findings in high-quality audit reports for submission to the Head of Internal Audit
• Support the Head of Internal IT Audit in managing the annual audit plan and promote automated business and risk monitoring
• Monitor developments in data protection, cybersecurity and regulatory requirements
• Research and evaluate emerging technologies and provide implementation recommendations.

CISA Internal Auditor – Technology and Security Controls

• Work at the intersection of engineering, customer success, and sales, helping customers maximize the value and security of our product
• Guide new customers through the full customer journey and enable them to maximize product value and security through technical demos, Proofs of Value (PoVs), email attack simulations, and onboarding
• Maintain a strong and mutually appreciated relationship with our customers and anticipate issues early on
• Manage and drive satisfactory resolutions of customer issues
• Interface with the customer as well as the product development team to identify customer needs and turn them into value-adding product features
• Analyze problems in production to find and mitigate the root causes

Customer Success Engineer – Cyber Security

• Develop and implement threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.
• Define and enforce secure coding practices in collaboration with development teams.
• Work with DevOps to integrate security into CI/CD pipelines and automate security testing.
• Monitor and respond to security incidents, conducting root cause analysis and implementing preventative measures.
• Ensure compliance with security standards and regulations (e.g., ISO 27001, GDPR, SOC 2).
• Design and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams to conduct security reviews of features, APIs, and third-party integrations.
• Develop incident response plans, security documentation, and best practices.
• Stay ahead of emerging threats, vulnerabilities, and security technologies.

• Design, deploy and configure application protection solutions (WAF, reverse proxy, load balancer)
• Implement and fine-tune WAF policies (positive/negative models)
• Manage advanced rule tuning and false positive reduction
• Deploy protections against common web attacks (OWASP Top 10, injections, XSS, etc.)
• Implement rate limiting and advanced protection strategies
• Lead progressive production rollouts (monitoring -> blocking)
• Secure HTTP/HTTPS traffic and manage TLS configurations on proxy/termination
• Control and reduce the exposure surface of applications on the Internet
• Contribute to traffic optimization (ports, access, filtering)
• Ensure consistency of L4/L7 configurations (load balancing, health checks, session persistence)
• Implement IP reputation-based filtering mechanisms
• Leverage threat intelligence feeds to strengthen protections
• Manage exceptions (allowlist), limit false positives and maintain rule quality
• Contribute to vulnerability management related to application exposure
• Participate in log analysis and security incident investigations
• Document configurations, maintain standards and ensure traceability
• Collaborate with network, security and application teams

See all jobs on JobTailor