Zürich
Cyber Defence Engineer (m/f/d)
- 18 October 2026
- 80 – 100%
- Permanent position
- German (Native language)
- 8001 Zürich
About the job
We have developed a web-based online platform for job searching and talent acquisition that digitalises the
application process and supports the company in quickly recognising talents in the market and securing them for the long term. With a digital Rocken profile, every
applicant can quickly and easily connect with market-leading companies and share their profile.
Our work places people at the centre technologically and organically. Rocken® offers
executive search and talent management consulting to address the personal and individual needs
of each person and to implement these optimally in recruitment and career planning.
Cyber Defence Engineer (m/f/d)
Role:
Detect attacks, reduce risks and actively protect a critical IT landscape: This position is aimed at a technically strong cyber defence specialist who does not view detection, monitoring and security engineering separately. We are looking for someone who technically advances security platforms and derives concrete protective measures from events.
Responsibilities:
Operation and technical advancement of a modern cyber defence platform
Monitoring a complex IT environment with a focus on early detection of suspicious activities
Optimisation of security monitoring, detection rules and alerting
Further development of EDR, XDR and SIEM functions to improve attack detection
Analysis of security-relevant events and support in incident response and threat investigation
Development of automated workflows for detection, triage and response
Evaluation of new attack techniques and transfer of relevant insights into technical protective measures
Building and maintaining detection use cases based on current threat intelligence findings
Technical securing of Windows clients, servers and Active Directory environments
Further development of endpoint security and device management concepts
Analysis of network traffic and security-relevant communication patterns
Support in security assessments, hardening and vulnerability management
Consulting IT and project teams on the technical implementation of security requirements
Integration of new security technologies into the existing platform landscape
Automation of security processes with PowerShell, APIs and SOAR approaches
Establishment of standards for logging, monitoring and security telemetry
Participation in architectural decisions around cyber defence and security operations
Involvement in maintenance windows and on-call models for critical security services
Qualifications:
Several years of experience in security operations, cyber defence, security engineering or detection engineering
Solid practical knowledge of EDR, XDR, SIEM or comparable security platforms
Very good knowledge of the Microsoft environment
Experience with Windows Server, Windows Client and Active Directory
Practical knowledge in endpoint security and endpoint management
Sound understanding of network technologies and common attack vectors
Experience with log analysis, security events and incident response
Ideally knowledge of MITRE ATT&CK, threat hunting or detection engineering
Interest in security automation and SOAR concepts
Ideally experience with PowerShell, REST APIs or comparable automation technologies
Analytical thinking and the ability to investigate complex security events in a structured manner
Independent and reliable working style
Enjoyment in professional exchange and continuously advancing security
Benefits:
- Canteen, meal allowances and discounts
- Attractive employee discounts
- Flexible working hours
- Family-friendly employment conditions, childcare
- Attractive training and development opportunities
- Coaching and mentoring
- Open corporate culture
- Comfortable office with modern infrastructure
- Flat hierarchies
ROCKEN Jobs:
https://rocken.jobs
Create profile:
https://rocken.jobs/application/profil-erstellen/
Work location
Zurich
Contact
Joshua de Boers,
+41443852112
