Incident Engineer (m/f)

• 17 July 2026 • 100% • Indefinite duration • Urdorf Ärztekasse Genossenschaft provides business process outsourcing services and eHealth solutions to healthcare professionals so that they are relieved of administration and can focus on medical work. Ärztekasse is renewing its entire data center as well as the products concerned by this transformation. To support this digitalization step, we are looking for smart and experienced engineers to contribute and design clever and creative solutions for a meaningful sector. Incident Engineer (m/f) Working time: 80-100% Start: immediate or to be agreed Duration: indefinite Location: Geneva region (Thônex) or Zurich region (Urdorf) Main tasks • Sorting, investigation and resolution of endpoint security alerts via Microsoft Defender on employee machines • Detection, analysis and response to security incidents on our endpoints, infrastructures and applications • Conducting incident response activities and coordinating remediations with engineering and operations teams • Adjusting detection rules to reduce false positives and continuously improve the quality of alerts • Development and maintenance of playbooks, processes and incident response tools • Monitoring security events and alerts (Microsoft Defender, SIEM, IDS/IPS) and driving continuous detection improvements • Conducting post-incident reviews and root cause analyses, following up on corrective actions • Implementing security best practices and strengthening systems against emerging threats • Participation in the future on-call rotation Requirements • More than 3 years of experience in security incident response, SOC or similar role • Hands-on experience with Microsoft Defender for Endpoint (EDR) and endpoint security • Good understanding of security monitoring, SIEM and detection engineering • Knowledge of attack techniques and incident management frameworks (e.g., NIST, MITRE ATT&CK) • Experience in Windows and Linux security; Kubernetes is a plus • Scripting and automation skills, preferably in Bash, Python or Go • Relevant certifications (e.g., GCIH, GCIA, OSCP) are a plus • Analytical, calm under pressure and good communicator; English required, German and French a plus Additional information A stimulating environment helps to find ingenious solutions to complex and demanding requirements. We work in small agile teams where you can have an impact and influence. You will find sharp engineers for inspiring discussions. We are solution-oriented, but we do not neglect the fun factor. We look forward to receiving your application! We look forward to your application by e-mail to recruiting@aerztekasse.ch.