Security Analyst / Architect (f/m/d)

On behalf of our client based in Geneva, we are looking for a Security Analyst / Architect (f/m/d) for a 6-month assignment, responsible for ensuring security operations, guaranteeing the continuity of critical services, and supporting the securing of GenAI deployments and the Product Lifecycle Framework.

Your mission

• Manage end-to-end vulnerability management: monthly scans, analysis and prioritisation of CVEs according to CISA KEV and EPSS, patch tracking and compliance reporting, while ensuring the migration from Rapid7 InsightVM to CrowdStrike Vulnerability Management.
• Operate and evolve the CrowdStrike environment: migration of the European tenant, removal of Cortex XDR, integration of log sources into Next-Gen SIEM, development of detection rules and level 2 handling of alerts and incidents.
• Ensure network security and certificate lifecycle by applying Fortinet and Palo Alto hardening releases, reviewing firewall rules, and managing TLS/PKI activities, including inventory, renewals, DCV, and internal PKI audit.
• Manage remediations from penetration tests and Red Team exercises, handle security backlog topics, including AWS guardrails and SCP, and become autonomous within three months on critical security services to ensure their continuity.
• Secure GenAI deployments and their integration into the product lifecycle by performing threat models, defining guardrails before production deployment, and integrating security controls at various stages of the Product Lifecycle Framework.

• Minimum 5 years of practical experience in security engineering or security operations, including at least 2 years in a complex enterprise environment, with strong autonomy on operational security services.
• Proven experience in end-to-end vulnerability management: scanning, prioritisation according to CISA KEV and EPSS, patch tracking and reporting. Experience in migrating vulnerability management platforms is appreciated.
• Good command of CrowdStrike Falcon, EDR and Next-Gen SIEM, or an equivalent environment, with experience in log source integration, detection creation, and incident handling.
• Strong knowledge of Fortinet and/or Palo Alto environments as well as TLS, PKI and certificate management. Good basics in AWS security: IAM, SCP, Security Groups and reading CSPM findings with Wiz or a similar solution.
• Practical experience securing at least one GenAI or LLM deployment in production: threat modelling, prompt injection, data leakage risks, excessive agency, and guardrail design.
• Experience in a product or SDLC environment integrating security controls at various lifecycle stages, with excellent documentation and cross-functional coordination skills; fluent English and French required.

Our offer

• Attractive working conditions: 6 weeks of holiday per year and an attractive pension plan
• Development and enhancement of potential: wide range of professional and personal training offered by the Bechtle Academy
• Diversity: interesting and varied tasks in a forward-looking sector

Job number: LVYML388 

Kevin Brosse | +41 22 308 85 00 |