Information Security Engineer - two positions
IT
lugano, switzerland
Information Security Engineer - two positions
80%-100%, Lugano, fixed-term
The Swiss National Supercomputing Centre (CSCS) develops and operates the compute and data infrastructure behind much of Switzerland’s computational science, from climate and weather to materials and large-scale AI. We are now extending the flagship Alps to compute on sensitive data, including medical data and other regulated datasets, through a Secure Computing Environment built for partners whose data must stay inside a tightly controlled perimeter. For that work, trust is what we deliver.
Project background
We are building an ISO/IEC 27001-certified information security management system, first for the Secure Computing Environment and then across the whole centre. Our Management Board and Director have approved a lasting expansion of CSCS’s security capability, and we are growing the team that runs it, starting with two Information Security Engineers to strengthen our security operations.
We have two positions to fill, both initially offered on a two-year contract. The preferred work location is Lugano, although Zürich may also be considered. These positions are funded through ETH Zurich's strategic HPCN-28 initiative, which supports the continued development of key institutional capabilities in line with ETH Zurich's strategic objectives. Following the initial contract period, the contracts may be extended and, subject to organisational needs and funding, could potentially become permanent over time.
Job description
As an Information Security Engineer, you will play a key role in protecting CSCS services, infrastructure and research environments. You will work closely with infrastructure, platform and application teams to strengthen CSCS’s security posture and keep its operating environment resilient and secure.
Your responsibilities will include:
- Design, implement and continuously improve security controls across the infrastructure.
- Monitor, detect, investigate and respond to security incidents using SIEM platforms (e.g. Wazuh or equivalent) and other security tools, including on-call duties where applicable and subject to an agreed operational arrangement.
- Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
- Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
- Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
- Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
- Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
- Collaborate with internal teams to prevent, identify and mitigate security risks.
- Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.
Profile
Required
- Several years of hands-on experience in security operations or security engineering.
- Strong knowledge of security monitoring, threat detection, incident response and security investigations
- Experience with SIEM technologies (Wazuh or comparable platforms).
- Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
- Proven experience with vulnerability management processes and tools.
- Experience securing Kubernetes and containerised environments.
- Solid Linux skills and fluency in scripting and automation (Python or similar; detection-as-code is a plus).
- Ability to communicate clearly with both technical and non-technical stakeholders.
- A proactive mindset, strong analytical skills and the ability to work independently.
- Fluent English.
Nice to have
- Experience with threat intelligence platforms, processes and threat-informed defence.
- Knowledge of AI security, including risks, governance and controls for AI-based systems and workloads.
- Experience in research, academic, HPC or large-scale distributed computing environments.
- Relevant certifications (e.g. CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).
You find “it works” mildly suspicious until you know why it works.
Workplace
Workplace
We offer
Our core values as guiding principles:
- Curiosity: You enjoy learning, exploring new ideas, and understanding problems deeply.
- Openness: You listen, collaborate, and are receptive to different perspectives.
- Courage: You tackle challenging or ambiguous problems and are willing to take initiative.
- Supportiveness: You help colleagues and users succeed and contribute to a positive team culture.
- Integrity: You act honestly, ethically, and reliably in your work.
Our culture and benefits:
- We are committed to building a diverse and inclusive engineering team and particularly encourage applications from from groups underrepresented in tech. If you are technically strong, curious, and eager to grow, we want to hear from you.
- At CSCS, being family-friendly is much more than a label. We provide flexible and supportive working conditions that help employees manage both their careers and family responsibilities. For example, one of our Lugano buildings hosts a childcare facility, and we financially support up to three weeks of summer camp for primary school children. If your child is sick and you need assistance, we will even cover the cost of in-home childcare for our Lugano based employees. We are proud to be a genuinely family-friendly employer and are committed to supporting our employees when they need it most.
- You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
- Your job with impact: Become part of ETH Zurich, which not only supports your professional development, but also actively contributes to positive change in society
We value diversity and sustainability
Curious? So are we.
We look forward to receiving your online application with the following documents:
- Motivation letter
- CV
- Relevant certificates and diplomas in pdf format
We look forward to receiving your online application. Please address your application to Mrs Stephanie Frequente, CSCS Human Resources, Via Trevano 131, 6900 Lugano.
Further information about CSCS can be found on our website. Questions regarding the position should be directed to Pim Witlox, Unit Head & Senior Architect, pim.witlox@cscs.ch (no applications).
Please note that we exclusively accept applications submitted through our online application portal. Applications via email or postal services will not be considered.
We would like to point out that the pre-selection is carried out by the responsible recruiters and not by artificial intelligence.
For recruitment services, the GTC of ETH Zurich apply.