• Monitor security alerts: Monitor security events across customer environments and identify potentially suspicious activity.
• Analyse and classify threats: Perform initial investigations to distinguish false positives from genuine security incidents.
• Escalate incidents: Document findings clearly and escalate confirmed or suspected threats according to established procedures.
• Follow investigation procedures: Apply standardised investigation playbooks and contribute feedback to improve alert quality.
• Support SOC operations: Contribute to service quality, operational efficiency and compliance with agreed service-level agreements (SLAs).
• Collaborate with the team: Work closely with senior analysts, incident responders and automation specialists to strengthen security monitoring and incident handling.

• You have completed an IT apprenticeship or hold a university degree, ideally with a focus on cybersecurity.
• You have an initial professional experience in IT or cybersecurity; previous SOC experience is an advantage.
• You have a solid understanding of cybersecurity fundamentals and common threats, including phishing, malware and ransomware.
• You understand networking fundamentals, including TCP/IP, DNS, firewalls and VPNs.
• You have strong analytical skills and a structured, detail-oriented approach to problem-solving.
• You can remain calm and focused in a fast-paced environment where alerts require timely assessment and prioritisation.
• You are flexible and willing to work in a shift-based SOC operation.
• You are proficient in German and French is a strong advantage.
• You communicate clearly and can document technical findings accurately.

What’s on offer?

• The opportunity to build your career in a specialised cybersecurity environment.
• Hands-on exposure to security monitoring, threat analysis and incident triage.
• The opportunity to learn from experienced cybersecurity professionals.
• A structured working environment with established procedures and investigation playbooks.
• The chance to contribute directly to protecting customer infrastructures against cyber threats.

Interested?