Cybersecurity Engineer in the public sector 80-100 % St.Gallen

Do you not believe in silo thinking in security? Do you understand both the perspective of the attacker and the defender and know that real security arises from cooperation? Do you combine offensive thinking with practical empathy and have the gift of not only finding complex security problems but also making them quickly fixable? Then we are looking for exactly you! As a "Purple Hat" you are the interface between attack research and defense strategy. You validate findings, accelerate the remediation of security vulnerabilities, and ensure that your knowledge reaches the teams. In doing so, you move directly within the context of our own developments - from internal platforms to productive specialist solutions for our customers. Your role ## • You conduct continuous internal security tests and hunt for vulnerabilities in systems, code, and configurations • You validate external inputs from Vulnerability Disclosure Programs, Bug Bounties, and security advisories for exploitability • You work closely with development and operations teams and translate technical findings into concrete, actionable measures • You create hardening checklists, detection rules, and step-by-step reproductions instead of just showing the problems • You propose patch strategies, review fixes, and orchestrate the validation of corrections • You prioritize in the jungle of AI-generated vulnerability reports and help your team focus on the critical risks • You communicate at eye level, manage to inspire, and get different teams on board Your profile ## • Experience in offensive security and code analysis • Solid programming and debugging skills - you understand code, not just the concepts • Understanding and experience in one or more programming languages • We develop in .NET, Java and mostly create Angular web frontends • Cloud and platform knowledge (Kubernetes, modern infrastructures) • Practical experience with defensive security measures and detection possibilities • High affinity for automation and analysis tools, including new AI-based security methods • Good technical writing and the gift of making complex content understandable to different target groups • Independence, structured way of working and above all: understanding for the teams that have to implement the findings Your benefits ## • Up to 60 % home office possible with a 100 % workload • Vacation purchase (2 weeks per year) • 41h week with flexible working hours with a full-time workload • At least 25 days vacation per year • Support for further training 100 % financially or in terms of time • Free SBB Half-Fare travelcard for all employees We maintain an open "Du" culture - so feel free to send us your application directly using the "Du" form.