Senior Security Operations Manager (SOC Manager) (a)

You take responsibility in a newly emerging SOC, actively shape processes, and strengthen the team with your expertise. Together with a well-coordinated team where ownership is lived and a large scope for design is offered, you actively shape security processes and contribute to stability.

• Amid the operational daily routine, you maintain an overview of security topics as the technical leader and take on prioritizations regarding coordination, implementation, and reporting for the department management. This ensures that the team works focused and efficiently.
• In building the SOC, you actively shape the internal anchoring and manage collaboration with the external provider, while always keeping interfaces, KPIs, and escalations clearly in view.
• You ensure stable operation of the security services with a focus on processes, runbooks, and playbooks for monitoring, incident handling, and continuous improvement.
• During security events, you ensure that the overview is not lost, coordinate incident response measures, and ensure through structured documentation, analysis, and lessons learned that the team emerges stronger from each incident.
• Where it gets technically deep, you actively assist in 3rd level support for security infrastructures and drive the further development of detection and use cases, so you directly achieve impact and actively shape processes.

• With a solid education in computer science and an advanced qualification (e.g., CAS or Bachelor) in information security or cyber security, you build on solid knowledge daily and can confidently master complex security tasks.
• With several years of experience in the security environment, ideally in security operations, SOC, or incident response, you have taken responsibility for operational coordination, prioritization, and team coordination and apply this experience purposefully.
• You combine broad know-how across several disciplines (operations/platforms/network/identity) with deep knowledge in Microsoft Defender/Sentinel (XDR/Endpoint/Identity) including triage, investigation, and response.
• You enjoy analysis and conceptual work as much as being hands-on.
• You live ownership and enjoy working in a team as well as in cross-functional work environments, e.g., the cantonal security expert network. In addition, you have very good German skills.