IT-Security Analyst – Cyber Defense Center (CDC) — Universität Zürich

Full description

Central computer science

Job opening immediately or by agreement, indefinitely

Central Computer Science provides IT services for students, researchers, institutes, faculties and central services of the University of Zurich. For our Cyber Defense Center (CDC), we are looking for a dedicated IT security analyst who will reinforce our operational cyber security and actively shape the detection, analysis and handling of security incidents as well as the further development of our detection and response capabilities.

Tasks

As an IT security analyst in the Cyber Defense Center, you monitor and analyze security-relevant events from different sources, carry out in-depth analyses and initiate appropriate protection and countermeasures if necessary.

Their responsibilities include in particular

• Analysis, triage and processing of security alerts and incidents from SIEM, Microsoft Defender XDR, endpoint, network, identity, cloud and other security sources
• Perform in-depth analysis and threat hunting in the Microsoft Defender Portal, in particular using Advanced Hunting and KQL or other tools in our SIEM
• Correlation and evaluation of events across different systems, log sources and security products
• Investigation of suspicious activity, attack indicators and possible compromises and initiation of appropriate incident response measures
• Lock and manage Indicators of Compromise (IOC) such as IP addresses, domains, URLs or hashes, etc.
• Further development of detection, hunting and response use cases in the SIEM as well as within the Microsoft 365 and Defender security platform
• Development and optimization of KQL queries, detection rules, alerting logic and automation
• Participation in vulnerability management, in particular in assessing, prioritizing and tracking identified vulnerabilities
• Continuous development of our security monitoring, detection and response processes in the CDC
• Documentation of incidents, analyses and measures as well as participation in IT security reporting

Profile

For this challenging position, we are looking for an analytically strong, independent and trustworthy personality with pleasure in technical security analysis, threat hunting and incident response.

They bring with them

• Completed studies, vocational training or higher education in computer science, cyber security or a comparable qualification
• Practical professional experience in security operations, SOC, CDC, incident response or IT security
• Very good knowledge in dealing with SIEM systems, security logs and detection use cases
• Good knowledge of the Microsoft Security Platform, in particular Microsoft Defender XDR, Defender for Endpoint, Microsoft 365 Security and Advanced Hunting
• Practical experience with KQL (Kusto Query Language) for the analysis, correlation and detection of security-relevant events
• Experience in exposure management, including vulnerability management
• In-depth knowledge in the areas of network, endpoint security, identity and cloud security as well as common attack and detection methods
• Experience in the analysis and processing of Indicators of Compromise (IOC) and Security Incidents
• Scripting skills, for example in PowerShell, Python or Bash, are advantageous
• Structured, precise and efficient working methods as well as good analytical and communication skills
• Good knowledge of German and English

We offer

Our employees benefit from diverse and attractive offers. Find out more at: https://www.uzh.ch/en/explore/work.html

We offer

Reconciliation between work and private life

• Flexible working models (e.g. part-time work, mobile work, job sharing)
• Childcare at the kihz Foundation of UZH and ETH

More Learning and development

• Various further education offers of UZH and the Canton of Zurich
• Language Centre of UZH and ETH Zurich

Food

• Discounted food in the canteens and cafeterias of UZH
• Lunch check card with food contribution from UZH

Health

• Special conditions at the Akademische Sportverband ASVZ
• Free Seasonal Flu Vaccinations
• Relaxation in the Relax Uniturm

Advantages

• Mobility: car sharing, car rental, parking
• Digitalization: devices, programs, mobile subscription

Conditions of employment

• Principles of UZH
• Public employment for most UZH employees

International Services

• Support offers for people from abroad

Locations

• Campus Zurich Center, Zurich Irchel, Oerlikon and Schlieren
• Locations Zurich West, Old Botanical Garden, Botanical Garden and Lengg

Work on UZH As the largest university in Switzerland, the University of Zurich offers a large number of attractive positions in various disciplines and professional fields. With around 10,000 employees and currently 12 professional profiles for learners, the university offers an inspiring working environment in cutting-edge research and education. Use your talent and skills with us. Find out more about UZH as an employer! More → https://www.uzh.ch/en/explore/work.html Please apply via our job portal www.jobs.uzh.ch.

Work on UZH

As the largest university in Switzerland, the University of Zurich offers a large number of attractive positions in various disciplines and professional fields. With around 10,000 employees and currently 12 professional profiles for learners, the university offers an inspiring working environment in cutting-edge research and education. Use your talent and skills with us. Find out more about UZH as an employer! More

Questions about this listing