Information Security Engineer

CSCS develops and operates the compute and data infrastructure behind much of Switzerland’s computational science, from climate and weather to materials and large-scale AI.

We are now extending the flagship Alps to compute on sensitive data, including medical data and other regulated datasets, through a Secure Computing Environment designed for partners whose data must remain within a tightly controlled perimeter.

For that work, we deliver trust.

We are building an ISO/IEC 27001-certified information security management system, first for the Secure Computing Environment and then across the whole centre.

Our Management Board and Director have approved a lasting expansion of CSCS’s security capability, and we are growing the team that runs it, starting with two Information Security Engineers to strengthen our security operations.

We have two positions to fill, both initially offered on a two-year contract

The preferred work location is Lugano, although Zürich may also be considered.

These positions are funded through ETH Zurich's strategic HPCN-28 initiative, which supports the continued development of key institutional capabilities in line with ETH Zurich's strategic objectives.

Following the initial contract period, the contracts may be extended and, subject to organisational needs and funding, could potentially become permanent over time.

As an Information Security Engineer, you will play a key role in protecting CSCS services, infrastructure and research environments.

You will work closely with infrastructure, platform and application teams to strengthen CSCS’s security posture and keep its operating environment resilient and secure.

Your responsibilities will include

• Design, implement and continuously improve security controls across the infrastructure.
• Monitor, detect, investigate, and respond to security incidents using SIEM platforms (e. g., Wazuh or equivalent) and other security tools, including on-call duties, where applicable and subject to an agreed operational arrangement.
• Extend security monitoring to the Secure Computing Environment: onboard log sources, manage retention, and operate its circuit-breaker and audit trails.
• Conduct threat hunting and security investigations using frameworks such as MITRE ATT&CK.
• Lead and coordinate vulnerability management, including identification, prioritisation, remediation tracking and risk assessment.
• Secure containerised and Kubernetes-based environments, integrating security throughout the platform lifecycle.
• Develop and maintain security monitoring, detection and response capabilities, automating wherever it pays off.
• Collaborate with internal teams to prevent, identify and mitigate security risks.
• Promote a strong security culture through awareness initiatives, training sessions and engagement across the organisation and our user community.
• Profile

Required

• Several years of hands-on experience in security operations or security engineering.
• Strong knowledge of security monitoring, threat detection, incident response and security investigations
• Experience with SIEM technologies (Wazuh or comparable platforms).
• Solid understanding of the MITRE ATT&CK framework and modern adversary tactics, techniques and procedures (TTPs).
• Proven experience with vulnerability management processes and tools.
• Experience securing Kubernetes and containerised environments.
• Solid Linux skills and fluency in scripting and automation (Python or similar; detection-as-code is a plus).
• Ability to communicate clearly with both technical and non-technical stakeholders.
• A proactive mindset, strong analytical skills and the ability to work independently.

Nice to have

• Experience with threat intelligence platforms, processes and threat-informed defence.

Knowledge of AI security, including risks, governance and controls for AI-based systems and workloads.

• Experience in research, academic, HPC or large-scale distributed computing environments.

Relevant certifications (e. g.

CISSP, GIAC GSEC/GCIA/GCIH, Certified Kubernetes Security Specialist).

We offer

Our core values as guiding principles

• Curiosity: You enjoy learning, exploring new ideas, and understanding problems deeply.
• Openness: You listen, collaborate, and are receptive to different perspectives.
• Courage: You tackle challenging or ambiguous problems and are willing to take initiative.
• Supportiveness: You help colleagues and users succeed and contribute to a positive team culture.
• Integrity: You act honestly, ethically, and reliably in your work.

Our culture and benefits

• We are committed to building a diverse and inclusive engineering team and particularly encourage applications from groups underrepresented in tech.

If you are technically strong, curious, and eager to grow, we want to hear from you.

• At CSCS, being family-friendly is much more than a label.

We provide flexible and supportive working conditions that help employees manage both their careers and family responsibilities.

For example, one of our Lugano buildings hosts a childcare facility, and we provide financial support for up to three weeks of summer camp for primary school children.

If your child is sick and you need assistance, we will even cover the cost of in-home childcare for our Lugano-based employees.

We are proud to be a genuinely family-friendly employer and are committed to supporting our employees when they need it most.

• You can look forward to an exciting working environment, cultural diversity and attractive offers and benefits.
• Your job with impact: Become part of ETH Zurich, which not only supports your professional development, but also actively contributes to positive change in society.
• #J-18808-Ljbffr