Cybersecurity Engineer - Threats, Exposure and Risks

Location: Geneva · Contract: Permanent · Assignment: long term · Rate: 100% · Start: January 2027

For one of our clients based in Geneva, we are looking for a Cybersecurity Engineer - Threats, Exposure and Risks to strengthen their operational cybersecurity capabilities.

Context

The IT security monitoring and coordination team wishes to have expertise enabling the organisation to anticipate emerging threats, identify those likely to affect its IT system, and trigger, when necessary, appropriate prevention, detection, hardening, monitoring or remediation measures.

This role is part of the evolution of the operational security framework. It aims notably to establish a structured capability for collecting, qualifying and analysing information related to cyber threats.

Your main mission is to respond in a structured manner to the following questions:

• Which threats are currently relevant to the organisation?

• Which IT system components are exposed to these threats?

• What is the level of risk associated with this exposure?

• What measures should be taken, and with what priority?

The objective is to create the conditions and operationalise the value chain enabling the following steps:

• Identification of vulnerability and qualification of the threat through multi-source collection, source reliability qualification, enrichment and contextualisation

• Active exploitation research, actors, campaigns and IoCs

• Search for affected products in the IT system and identification of exposed assets

• Cross-referencing CVSS + EPSS + KEV + exposure + criticality + protections

• Definition of priority and necessary measures

• Patch, mitigation, hardening, blocking, enhanced monitoring, etc.

• Adaptation of SOC rules and possible launch of Threat Hunting

• Confirmation of the disappearance of exposure and search for possible signs of compromise

• Updating knowledge, procedures and detection capabilities

Your missions

• Organise threat monitoring and establish a structured capability for collecting, qualifying and analysing information related to cyber threats

• Identify and characterise threats, analyse collected information to identify those relevant to the organisation

• Assess relevance for the IT system based on assets, technologies, exposure, existing protection measures, etc.

• Evaluate the risk associated with identified threats taking into account the specific context

• Alert when the risk level justifies it

• Propose detection or compromise search actions

• Coordinate with teams responsible for assets and security capabilities the implementation of decided measures

• Monitor the effective reduction of exposure until risk closure

• Produce indicators and summaries adapted to different decision-making levels

Education

• University Master’s degree in computer science, EPF engineering diploma or equivalent

Essential skills

• Proven experience in cyber threat intelligence, vulnerability management, exposure management or cyber risk analysis, with demonstrated ability to relate these disciplines

• Mastery of threat intelligence concepts and tools and threat qualification

• Demonstrated ability to cross-reference threat information, vulnerabilities, technical exposure, asset criticality and protection measures to qualify and prioritise a cyber risk

• Ability to link vulnerabilities, product, threat, TTPs, assets and measures to be taken

• Mastery of main vulnerability qualification and prioritisation mechanisms (CVSS, EPSS, KEV or equivalent) and ability to contextualise them with exposure and internal criticality

• Very good understanding of asset management principles, IT system mapping and cyber exposure management

• Ability to exploit inventories, CMDB, vulnerability scanners and other data sources to identify assets concerned by a threat

• Mastery of cyber risk analysis and ability to produce a contextualised risk assessment from threat, vulnerability, exposure, criticality and existing controls data

• Ability to translate threat analysis into concrete and prioritised measures: patching, mitigation, hardening, blocking, enhanced monitoring, detection or hunting

• Understanding of attack techniques (MITRE ATT&CK, TTP, IoC, etc.)

Appreciated skills

• Good understanding of SOC functioning and ability to formulate detection or Threat Hunting needs

• Knowledge of EDR

• Knowledge of vulnerability management tools

• Ability to reason with incomplete or uncertain information and to explain the confidence level associated with an analysis

A plus

• Scripting (PowerShell, etc.)

• Experience with SPL or an equivalent query language

Personal qualities

• Analytical mind

• Technical curiosity

• Ability to summarise

• Rigor

• Ability to work under pressure

• Aptitude to communicate with technical and non-technical interlocutors