Cyber Security Analyst (80-100%)

Gridvision Engineering GmbH seeks a Cyber Security Analyst to join its Cyber Defense Center in Aarau. The role focuses on protecting Switzerland’s energy infrastructure through threat hunting, incident response, and security engineering.

This position sits within the Cyber Defense Center, where the team safeguards IT and OT networks critical to Switzerland’s energy security. The analyst helps monitor the electricity grid operator’s infrastructure, responds to security incidents, and drives the continuous improvement of defense capabilities.

Responsibilities

• Design threat models and define new use cases for SIEM systems.
• Investigate security breaches, create countermeasures, and coordinate response efforts during incidents.
• Refine and enhance the organization’s incident response procedures.
• Execute forensic investigations on affected systems and proactively hunt for hidden threats.
• Manage engineering projects to upgrade current tools or deploy new security solutions.
• Maintain regular communication with SOCs and CERTs from other critical infrastructure providers and authorities.
• Participate in an on-call rotation to ensure continuous coverage.
• Monitor global threat trends, with a specific focus on developments in the energy sector.

Requirements

• 3–4 years of practical experience working as a SOC Analyst or Incident Responder.
• A university degree in Information Security, Information Technology, or a closely related discipline.
• Strong proficiency with security technologies including SIEM, EDR, and NDR platforms.
• Hands-on experience with command-line consoles and scripting languages such as PowerShell, Bash, or Python.
• Fluent English communication skills.

Nice to have

• Knowledge of industrial control systems (ICS) and familiarity with substation technical challenges.
• Proficiency in the German language.

What the company offers

• Flexible working hours that allow for independent scheduling.
• 25–30 vacation days, plus additional company holidays between Christmas and New Year.
• A modern workspace located near Aarau train station.
• Clear pathways for professional growth and skill development.
• Financial or time-off support for attending internal or external training courses.

About the company

Gridvision Engineering GmbH holds a unique position within the Swiss market. The organization values strong team spirit and fosters a diverse working environment. Its teams actively track evolving cyber threats to develop effective defensive strategies.

• The company maintains a distinctive status in the Swiss industry.
• Collaboration and diversity are central to the workplace culture.
• Continuous monitoring of the threat landscape drives the development of robust countermeasures.