ICT Senior Security Engineer

Belonging, meaningfulness and competence

With a well-coordinated team, we accompany patients through highs and lows and help them find their way back to life or to their profession after an accident or illness.

As a Senior Security Engineer, you will take on operational responsibility for central, permanently recurring security tasks and build critical knowledge as well as decision-making competence within the Suva-Kliniken.

You can expect a newly created, responsible specialist function with a direct influence on the cyber resilience of the Suva-Kliniken. In doing so, you will move between operational day-to-day business, strategic initiatives and collaboration with specialized external partners. At the same time, you will receive scope for design in building up internal security competence and in the further development of our ISMS.

No dossiers from recruitment agencies will be considered for this position.

Tasks

• Security Monitoring & Troubleshooting in the areas of XDR, SIEM, NAC and NDR, including maintenance and troubleshooting
• Basic Digital Forensics & Incident Response including coordination with the SOC
• Further development of vulnerability management as well as tracking and implementation of security measures together with the local teams
• Maintenance and further development of the ISMS
• Ensuring compliance with ISO 27001 and the IKT-Minimalstandards, including the performance of maturity analyses, controls and gap assessments
• Co-design and further development of the security strategy and architecture across network, cloud (M365/Azure) and endpoint
• Performance of security configuration audits and continuous further development of our security solutions, including MS Defender, SentinelOne, CrowdStrike, Microsoft Azure and M365
• Performance of risk analyses, ongoing risk tracking as well as level-appropriate reporting to internal and external stakeholders

Profile

• Completed education in the field of informatics (HF/FH) with a focus on IT/Cyber-Security or comparable further training or relevant certifications (e.g., CISSP, AZ-500, SC-100)
• Several years of professional experience in an operational cyber-security function
• Sound practical knowledge in the following areas:
• SIEM/XDR/NDR/NAC
• Vulnerability Management
• IAM/PAM
• AD/DNS/DHCP/CS
• Security architecture
• Good knowledge of security standards and frameworks, especially ISO 27001 and IKT-Minimalstandard
• Experience in cooperation with external security service providers (SOC, MSSP) is an advantage
• Analytical, structured and independent way of working as well as high initiative and willingness to take responsibility
• Strong communication skills as well as very good German and English skills; French skills are an advantage, willingness to perform on-call duties

Benefits - good work needs good conditions

• 50% discount on health insurance premiums
• Attractive pension benefits
• Compatibility of career and family: Own daycare center, financial support for external childcare
• Days off on birthdays as well as on individual extra-cantonal public holidays
• Extensive internal training offers as well as participation in external further training
• Free use of the training and leisure center
• Modern infrastructure in a scenic environment near Zürich

Contact

Albulena Aziri
Deputy Head of IT ad Interim
Tel.

Fabienne Burkhard
HR Consultant
Tel.

j4id10421113a j4it1040a j4iy26a