Zürich
Cyber Security Engineer - Threat Detection & Automation (m/f/d)
- 30 October 2026
- 80 – 100%
- Permanent position
- German (Fluent)
- 8001 Zürich
About the job
We have developed a web-based online platform for job searching and talent acquisition that digitalises the
application process and supports companies in quickly recognising talents in the market and securing them for the long term. With a digital Rocken profile, every
applicant can quickly and easily connect with market-leading companies and share their profile.
Our work places people at the centre, both technologically and organically. Rocken® offers
executive search and talent management consulting to address the personal and individual needs
of each person and to implement these optimally in recruitment and career planning.
Cyber Security Engineer - Threat Detection & Automation (m/f/d)
Alternative investments require foresight, expertise and genuine partnership. Our Rocken partner is a leading specialist in alternative investments, combining principal investing with a long-term mindset. The field of activity includes private markets, multi-alternatives as well as sustainable investment strategies - always focusing on tailor-made solutions and close collaboration with managers and clients. Genuine commitment counts here: the team invests in its own strategies and thinks in terms of long-term partnerships rather than short-term successes. A culture based on principles, responsibility and sustainable action shapes everyday work. Ready to bring your expertise to an environment that redefines alternative investments? Then we look forward to connecting you with our Rocken partner.Role:
Detect threats before they become security incidents.
Do you analyse complex technical contexts, think like an attacker and develop automated protection mechanisms? In this role, you combine threat detection, vulnerability management and security engineering into an effective defence strategy. You improve attack detection, reduce security risks and further develop processes that withstand even demanding threat scenarios.
Responsibilities:
Further development of technical security measures to detect, assess and defend against modern cyber threats
Analysis of infrastructure, cloud, identity and endpoint telemetry to identify suspicious activities
Optimisation of detection rules, use cases and alerting logics in collaboration with security operations
Further development of incident response processes, technical runbooks and standardised investigation procedures
Responsibility for the continuous improvement of vulnerability management from identification to sustainable remediation
Assessment of vulnerabilities based on technical criticality, actual attack paths and business impact
Development of automations for security checks, risk assessments and recurring operational tasks
Implementation of technical protection concepts for Microsoft cloud services, identity platforms and hybrid system landscapes
Conducting in-depth analyses related to penetration tests, red team results and security-relevant anomalies
Review and improvement of existing security architectures, configurations and technical standards
Support during security incidents and deriving long-term improvement measures from technical insights
Development of reusable security controls and automated testing mechanisms with PowerShell, Python or APIs
Technical consulting of IT teams for the secure introduction of new platforms, applications and cloud services
Documentation of risks, technical decisions, security measures and operational processes
Qualifications:
Several years of experience in cyber security engineering, threat detection, vulnerability management or security operations
Solid understanding of current attack methods, attack vectors, threat models and modern detection techniques
Experience with SIEM and XDR platforms, ideally Microsoft Sentinel and Microsoft Defender XDR
Good knowledge of Microsoft Entra ID, Active Directory, Conditional Access and identity protection
Practical experience with vulnerability scanners, technical risk assessment and coordination of remediation measures
Knowledge of PowerShell, Python or comparable scripting languages for automating security tasks
Ability to evaluate logs and telemetry data, recognise attack patterns and reconstruct technical contexts
Understanding of cloud security, endpoint protection, zero trust and securing hybrid IT architectures
Experience with incident response, penetration tests or red team results is an advantage
Structured, analytical and solution-oriented working style even in complex security incidents
High sense of responsibility, integrity and a consistent commitment to quality and compliance
Communication skills and enjoyment in collaborating with technical specialists and various stakeholders
Knowledge of MITRE ATT&CK, KQL, detection engineering or security orchestration and automation is an advantage
Benefits:
- Flexible working hours
- Home office
- Attractive training and development opportunities
ROCKEN Jobs:
https://rocken.jobs
Create profile:
https://rocken.jobs/application/profil-erstellen/
Work location
Zurich
Contact
Joshua de Boers,
+41443852112
