• Act as the primary contact and ambassador for the Group Cyber Defense Center, representing Cyber Defense and supporting country organizations in effectively leveraging Cyber Defense services
• Review local implementations of Group Cyber Defense services, analyze technical, procedural, and organizational deviations, and communicate identified gaps clearly and risk-based to relevant stakeholders
• Hunt and analyze threats with strong analytical depth and instinct by investigating suspicious activities, identifying data-driven cyber risks, and uncovering weaknesses in operational cyber resilience
• Support the response to cyber incidents by steering, coordinating, and challenging internal and external stakeholders and response measures to ensure swift, effective, and controlled containment
• Evaluate, challenge, and drive remediation and prevention measures to achieve sustainable security improvements and prevent recurring attacks
• Actively support projects by ensuring Group Cyber Defense requirements are considered early and implemented consistently
• Share expertise, best practices, and methodologies (e.g., SANS, MITRE ATT&CK), mentor less experienced analysts, and contribute to the continuous improvement of IT services

• Several years of professional experience in a Cyber Defense environment, ideally as a Senior Incident Responder or Tier 2/3 Analyst, either with a cybersecurity service provider or in a regulated environment (e.g. financial services or insurance)
• Strong hands-on experience in incident response, digital forensics, threat hunting, and threat intelligence, including complex attack scenarios and cloud-based environments
• SANS certifications (e.g. GCIH, GCIA, GCED, GNFA, or comparable) or demonstrably equivalent, in-depth expertise in the area of detection and response
• Very good knowledge of modern cloud environments and security concepts, in particular AWS and/or Azure, including log analysis as well as network- and identity-based threats
• Ability to actively drive the requirements of Group Cyber Defense and provide hands-on support to local entities during implementation
• Strong ability to communicate complex technical topics clearly, precisely, and in a target-group-oriented manner, contributing to efficient and timely incident handling
• Independent, structured, and reliable working style with a high level of personal responsibility, strong analytical thinking, and quick comprehension
• Good command of German and English, both written and spoken

Over 100 professions – discover the range of jobs at Helvetia

• Flex Office enables people to work independently of time and place
• Attractive staff discounts and stock programmes
• Attractive training and continued professional development programmes
• Above-average retirement provision benefits
• Staff restaurants at our main locations

FlexOffice: Work independent of location and time

Flex Office enables people to work independently of time and place

Attractive benefits

Attractive staff discounts and stock programmes

Attractive training and further education programme

Attractive training and continued professional development programmes

Retirement plan

Above-average retirement provision benefits

Employee restaurant

Staff restaurants at our main locations