Senior Incident Response Consultant — Zurich Insurance (sede Ticino)
- Location
- Lugano
- Contract
- part-time
- Posted
- 3 days ago
Role overview
This role joins SpearTip, the cybersecurity consulting segment within Zurich Resilience Solutions.
Blending cutting-edge technologies, unique skill sets, and proven cyber counterintelligence strategies, SpearTip partners with our clients to protect shareholder value, shield corporate reputations, and enhance long-term profits.
We are driven to protect our clients from the ever-changing threat actors and become the gold standard in detecting zero-day vulnerabilities.
- This role joins SpearTip, the cybersecurity consulting segment within Zurich Resilience Solutions.
- Blending cutting-edge technologies, unique skill sets, and proven cyber counterintelligence strategies, SpearTip partners with our clients to protect shareholder value, shield corporate reputations, and enhance long-term profits.
- At Zurich, we value your ideas and experience.
- High School Diploma or Equivalent and 7 or more years experience in the Information Technology area AND MS Office experience AND Knowledge of Cyber Security Operations
Key requirements
- At Zurich, we value your ideas and experience.
- High School Diploma or Equivalent and 7 or more years experience in the Information Technology area AND MS Office experience AND Knowledge of Cyber Security Operations
Application process
- If your expectations are above the listed range, we still encourage you to apply—your unique background matters to us.
Contacts
- Provide expert guidance on ransomware negotiations, business email compromise investigations, insider threat cases, and advanced persistent threat incidents.
Company and context
- Develop and deliver incident response retainer services, conducting proactive readiness assessments, tabletop exercises, and security program evaluations for client organizations.
- Mentor junior consultants and analysts, providing technical guidance and quality assurance on client deliverables.
- Maintain detailed case documentation, time tracking, and engagement status reporting to ensure accurate billing and project management.
- Partner with insurance brokers, managed service providers, and law firms to provide incident response services as part of cyber insurance claims and breach response protocols.
- Stay current on emerging threats, attack techniques, and forensic methodologies through continuous research and professional development.
- Contribute to thought leadership initiatives including blog posts, conference presentations, and client education materials.
- Business Travel, as required (may be extensive during active incidents) as well as extended hours during Active Incidents/24x7 On-call Rotation, flexible scheduling to accommodate client emergencies and time-sensitive investigations, as required. Additional Business Accountabilities:
- Develop scopes of work and cost estimates for incident response engagements, ensuring projects are appropriately resourced and profitably delivered.
- Identify opportunities for expanded client engagements based on investigation findings, security gaps, and client needs.
- Support business development activities including client presentations, capability demonstrations, and proposal development for new and existing clients.
Additional details
- Requires building trust with C-level executives, IT leaders, legal counsel, and insurance partners while managing complex multi-stakeholder relationships during crisis situations. Key Accountabilities:
- Business Travel, as required (may be extensive during active incidents) as well as extended hours during Active Incidents/24x7 On-call Rotation, flexible scheduling to accommodate client emergencies and time-sensitive investigations, as required. Additional Business Accountabilities:
- Ensure all client deliverables meet quality standards and are delivered within agreed timelines and budgets. Basic Qualifications:
- Bachelors degree and 5 or more years experience in the Information Technology area
- Zurich Cybersecurity Technician Apprentice, including Cyber Security Certification and 6 or more years experience in the Information Technology area
- High School Diploma or Equivalent and 7 or more years experience in the Information Technology area MS Office experience Knowledge of Cyber Security Operations Digital Forensics & Incident Response Proficiency Level Advanced Threat Intelligence & Malware Analysis Proficiency Level Intermediate
- Client Communication & Stakeholder Management Windows/Linux System Forensics Network Forensics & Log Analysis Cloud Security (Azure/AWS/M365)
- Forensic Tool Proficiency (EnCase, FTK, X-Ways, Volatility, etc.) Ransomware & BEC Investigations Report Writing & Executive Communication Project Management Missouri Virtual Office, AM Remote Working: Hybrid Schedule: Full Time Employment Sponsorship Offered: No
Notes and original content
- Requires building trust with C-level executives, IT leaders, legal counsel, and insurance partners while managing complex multi-stakeholder relationships during crisis situations.
- Key Accountabilities:
- Business Travel, as required (may be extensive during active incidents) as well as extended hours during Active Incidents/24x7 On-call Rotation, flexible scheduling to accommodate client emergencies and time-sensitive investigations, as required.
- Additional Business Accountabilities:
- Ensure all client deliverables meet quality standards and are delivered within agreed timelines and budgets.
- Basic Qualifications:
- High School Diploma or Equivalent and 7 or more years experience in the Information Technology area
- MS Office experience
- Knowledge of Cyber Security Operations
- Digital Forensics & Incident Response
Questions about this listing
What salary does Zurich Insurance (sede Ticino) offer for this role?
Zurich Insurance (sede Ticino) lists CHF 79'500 - 135'000 gross per year for this position in Lugano. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Zurich Insurance (sede Ticino) offer?
This listing is a part-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Zurich Insurance (sede Ticino) during the application process, since these details can vary by role even within the same contract category.
Do I need the G permit to apply for this role in Ticino as an Italian cross-border worker?
Yes, if you are resident in Italy within the 20 km border zone. The Swiss employer files the G-permit application at the Ticino cantonal migration office after the contract is signed — first issuance takes 2-6 weeks, then automatic yearly renewal for as long as the employment continues. Weekly return to your Italian home is required to keep the status. Note: this listing allows remote work — teleworking above 25 % of your time can shift your social-security base to Italy, so confirm the agreed remote share with HR before signing.
How do I apply for this position at Zurich Insurance (sede Ticino)?
Use the "Apply now" button on this page — it links directly to Zurich Insurance (sede Ticino)'s original listing at careers.zurich.com, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
