Senior Security Analyst (f/m/x/d, hybrid set up, 80-100%)

Join a team of security and technology professionals and help Swiss Re to fulfil its mission in making the world more resilient.

We're looking for an experienced, forward-thinking cybersecurity leader who will manage the production of detection content and incident investigation and help us to improve our incident response techniques. As a Senior Cybersecurity Analyst, you will be monitoring current threats by analysing and handling major cyber incidents, implementing standards and mentoring less experienced analysts. 

What's more, you'll be working in a hybrid setup (50:50), balancing work from home and the office premises (office presence required 2–3 days per week).

About the team  

Group Security & Technology Platforms (GSTP) brings together security, technology platforms and operational resilience to provide secure, reliable and scalable foundations for Swiss Re's business. The function ensures that security, resilience and engineering quality are embedded by design into how technology is built, operated and evolved across the organisation. 

You will be part of the Cyber Defence team – made of passionate individuals who keep the company safe by going above and beyond in terms of preciseness and diligence. We oversee the maintenance of security operations, focusing on delivering high-quality detection monitoring and response solutions. Our team values innovation, collaboration and continuous learning, providing you with a stimulating environment to grow your expertise and make a tangible impact on our cybersecurity practises. 

In your role, you will… 

Play a pivotal role in safeguarding our organisation's systems and data and lead the charge in:

• Security monitoring – Oversee security operations, use advanced tools to monitor and analyse alerts, proactively detect incidents in real time, investigate and coordinate responses

• Incident response – Investigate security incidents, contain breaches and implement remediation strategies

• Operational excellence – Implement and maintain high operational standards

• Threat intelligence – Stay updated on cybersecurity threats and trends

• Team leadership – Mentor and guide a team of cybersecurity analysts, provide technical expertise, foster their development, support their growth and empower them to succeed. Act as a deputy to the Head of Monitoring

• Security strategy – Develop and implement security policies, procedures and controls to enhance the overall security posture of the organisation

• Security compliance – Ensure regulatory compliance with industry standards

• On-call duty – Participate in on-call rotations to address urgent matters outside of regular working hours

What we need from you… 

Nobody is perfect and meets 100% of our requirements. If you, however, meet some of the criteria below and are curious about the world of threat analysis and detection, we'll be more than happy to meet you! 

Must-have:

Qualification & background

• Min. 5 years of work experience in cybersecurity as a Security Analyst or Incident Responder (preferably in SOC/CSIRT setup)

• In-depth knowledge of current threat landscape, offensive tooling and OWASP and industry-standard security framework, such as MITRE ATT&CK® techniques and Cyber Kill Chain

• Experience in malware and exploit analysis (or reverse engineering) 

• Excellent oral and written communication skills in English

• Additional experience should include:

• Developing hypothesis-driven threat hunts 

• Analysing various events, including but not limited to web traffic, underlying network protocols, malware, lateral movement TTPs (techniques, tactics, and procedures) or Microsoft and Linux security events 

• Logfile correlation and analysis 

• System and memory analysis 

• Chain of custody and forensic acquisitions 

• Major incident response or breach investigation management 

Personal competencies

• Excellent analytical and problem-solving skills with attention to detail

• Effective communication and presentation abilities to articulate and present complex security concepts to both technical and non-technical audiences

• Stakeholder management experience

• Demonstrated leadership experience 

• Ability to work well in a fast-paced environment

Nice-to-have:

• Degree in Computer Science, Cybersecurity, Information Technology or a related field

• Experience developing in Python, Kusto or any other scripting language 

• Knowledge of cloud security best practices and experience in cloud environment Azure or Amazon AWS

• Knowledge of cybersecurity frameworks, such as NIST, ISO or CIS controls.

• Experience with security tools and technologies such as SIEM, IDS/IPS, EDR, DLP solutions

• Understanding of threat intelligence 

• Certifications: CEH, CISM, CCSP, CISSP

For Switzerland the base salary range for this position is between CHF 128,000 and CHF 192,000 (for a full-time role). The specific salary offered considers:

• the requirements, scope, complexity and responsibilities of the role,
• the applicant’s own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.

Swiss Re is one of the world’s leading providers of reinsurance, insurance and other forms of insurance-based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting-edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 15,000 employees across the world.

Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability.

If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience.

We may use AI-powered tools to support the review and evaluation of applications for this position. These tools provide additional insights to our recruitment teams, but all hiring decisions are carefully reviewed and made by people. To learn more about how we use AI in recruitment and how we handle your personal data, please review our Data Privacy Statement before applying.