Cyber Security Engineer (w/m) 100%

NZZ is one of the most significant private media companies in Switzerland. We focus on high-quality, independent journalism and represent a liberal worldview. With our products, we offer our users orientation and inspiration daily. In addition to the two flagship titles "Neue Zürcher Zeitung" and "NZZ am Sonntag", various other titles, event series, podcasts and TV formats are part of the portfolio. Cyber Security Engineer (w/m) 100%. ### Your tasks ### • Operation & Lifecycle: You are responsible for the configuration and maintenance of our central security tools (including EDR/XDR, cloud security infrastructure) and accompany the entire lifecycle of these systems • SOC & Interface Management: You are the primary technical contact person for our external SOC partner. You control the platforms, coordinate the onboarding of new data sources and continuously refine our detection rules (use cases) • Incident Response & Review: In the event of security alerts, you take over the technical triage. You initiate immediate measures, coordinate the cleanup with the infrastructure teams and ensure our learning effect through post-incident reviews • Threat & Vulnerability Management: You assess current threat situations for NZZ, prioritize vulnerabilities and ensure their remediation • Security Governance: You operationally manage the bug bounty program as well as external penetration tests and create technical runbooks as well as dashboards for CISO reporting • Awareness Programmes: You manage the cyber security awareness platform together with the CISO and are available as a contact person for users Your profile ### • Education: Completed IT training (Informatiker EFZ) or a degree in computer science, business informatics or cyber security • Experience: You bring sound practical experience in the operation of security infrastructures or in a SOC environment. Ideally, you are familiar with working with external SOC service providers from your own experience and have direct experience with Palo Alto Cortex XSIAM or comparable next-gen platforms • Technical Know-how: You are proficient in handling SIEM and SOAR systems. You have a solid understanding of network architectures (TCP/IP, firewalls) as well as cloud security models (AWS/Azure/GCP) • Certifications (Bonus): Ideally, you possess certifications such as CompTIA Security+ or equivalent manufacturer-specific qualifications • Resilience: Calmness and sovereignty in stressful situations (incident response) as well as a high tolerance for frustration • Team Player Mentality: Active participation in knowledge building within the team and proactive feedback culture (lessons learned) • Methodology: You think analytically, work in a structured manner and maintain an overview even in stressful incident situations • Languages: German is your mother tongue (or C2), you are proficient in English (B2/C1) to professionally process international threat reports Our offer ### • With us, you do not manage legacy systems. You design a real zero-trust architecture using Google Context-Aware Access, control our detection & response via Palo Alto XSIAM and work directly with the global hacker community via our bug bounty program • High level of personal responsibility: A multifaceted field of activity in the security team, in which your ideas are heard directly • Working hours: We support the compatibility of professional and private life with modern working models (flexible working hours with a 40-hour week (100%), partial work from home, day off on your birthday, 5 weeks of vacation with the option to purchase additional vacation, etc. • Great working environment: Our office is centrally located "at Bellevue" in the heart of Zürich with a view of the opera house and the lake and within walking distance of various restaurants and shopping facilities Isabelle Liechti, HR Business Partner +41 44 258 17 09 Are you interested? Then we look forward to receiving your complete online application.