SOC Analyst L1

Senthorus is a SOC unit that supports the Swiss market with first-class managed security solutions from Switzerland. All data remains in Switzerland. Our services are aimed at Swiss and European customers.

As a Security (SOC) Analyst – L1 you are the first line of defence for our customers' cybersecurity. You monitor security-relevant events around the clock, analyse incoming reports and alerts from various security solutions, and assess potential threats. You ensure that security-critical incidents are detected early, correctly prioritised, and handled or escalated according to defined processes.
You play a crucial role in minimising risks for our customers and protecting the availability of their business-critical systems. At the same time, you have the opportunity to continuously develop your skills in threat detection, incident response, and cyber defence.

Important: The position is based in Zurich and involves working in a rotating 24/7/365 shift model, including night and weekend shifts.

Your tasks

• You monitor security-relevant events and alerts from SIEM, EDR, XDR, and other security platforms and respond to suspicious activities
• You analyse and prioritise incoming security alerts from various monitoring and security systems and perform an initial threat assessment
• You evaluate incoming security alerts and security-relevant events regarding their threat potential and associated risks, ensuring timely, structured, and traceable follow-up
• You record, document, and handle security incidents in our ticketing system and escalate complex cases to higher-level analysts or the customer as needed
• You work closely with our customers' IT teams, inform them about potential security incidents, and support them in initiating appropriate countermeasures
• You analyse log data, network activities, and other security information to distinguish actual threats from false alarms
• You ensure complete and traceable documentation of security incidents, analyses, and measures taken
• You observe current cyber threats, attack methods, and security trends and incorporate this knowledge into daily analysis work
• You contribute to the continuous optimisation of our detection and monitoring processes and support the further development of our Security Operations Centre

Our offer

• The chance to expand your expertise through diverse projects and unique products, the latest technologies, and customers from various industries
• Attractive prospects through continuous training, coaching, and an internal career path
• Our culture makes the difference! We actively live flat hierarchies and open, helpful collaboration across all disciplines and departments
• We organise regular events such as brown bag lunches, coding challenges, as well as relaxed aperitifs and sporting events
• A modern and flexible workplace in a multicultural environment
• Top benefits such as: purchasing up to 13 days of holiday, contributions towards private mobile phones or business handsets, half-fare travel cards, business travel in first class, flexible pension schemes, coverage of daily sickness and accident insurance (private, worldwide), and much more

Your profile

• Completed studies (Bachelor/Master) in information security, computer science, or a related IT field

• Initial practical experience in cybersecurity, IT operations, system administration, or a SOC/CSIRT environment is an advantage

• Willingness to work shifts in a 24/7/365 operation, including nights, weekends, and public holidays
• Practical experience with at least one SIEM (e.g. Sentinel, Splunk) and one EDR (e.g. Defender for Endpoint, SentinelOne, CrowdStrike)
• Good knowledge of Windows and Linux
• A good sense for recognising signs of intrusions and cyberattacks in event logs
• A cool head: you work in a structured and professional manner even in time-critical situations
• Enjoyment of direct customer contact: you understand your customers' requirements and take their feedback on our security services
• Team spirit and curiosity: you enjoy working in a team and continuously learning new things
• Very good German and English skills, spoken and written (at least C1)
• A cybersecurity certification (e.g. GIAC) is a plus

Ready for your next challenge?
Do you want to apply your experience in the cybersecurity field, develop professionally, and contribute significantly to the security of our customers together with a dedicated team?
Then we look forward to getting to know you and learning more about your experience and motivation.