CSIRT Analyst - Cybersecurity

Das ist der Job

Experis SA, the IT branch of ManpowerGroup, is a leader in recruiting specialised IT profiles.

Darum lohnt es sich

Thanks to our global reach combined with a pragmatic and personalised approach, we effectively support professionals and companies in achieving their goals.We are looking for an experienced CSIRT Analyst to join a Cyber Defence team within a large international financial organisation based in Geneva.

Leading cyber crisis cells: activating the emergency plan, coordinating multi-team efforts. Interpersonal skills Ability to coordinate technical and business teams. Team spirit and sharing mindset. Strategic project within a large international organisation.

Dynamic team, continuously improving, with a strong security culture. jid68341fcaen jit0833aen jpiy26aen We offer flexible solutions: temporary assignments, permanent placements, project management, and professional training. Our expertise covers digital transformation, cybersecurity, cloud, infrastructures, and more.

Thanks to our global reach combined with a pragmatic and personalised approach, we effectively support professionals and companies in achieving their goals. CSIRT Analyst - Cybersecurity Experis SA, the IT branch of ManpowerGroup, is a leader in recruiting specialised IT profiles.

We offer flexible solutions: temporary assignments, permanent placements, project management, and professional training. Our expertise covers digital transformation, cybersecurity, cloud, infrastructures, and more.

This strategic assignment, initially for one year (renewable), aims to strengthen cyber incident response capabilities within a highly sensitive and regulated environment.

Your responsibilities In this key role within the CSIRT, you will be responsible for: Ensuring CSIRT operational activities: detection, qualification, investigation, and remediation of security incidents. Producing technical and executive reports for management. Conducting complex investigations and documenting actions taken.

Performing Threat Intelligence monitoring, including analysis of attack techniques (MITRE ATT&CK). Participating in vulnerability management and patch management. Contributing to continuous improvement: CSIRT playbooks, feedback, best practices. Taking part in table-top exercises and internal/external audits.

Position is 100% on-site due to the sensitivity of activities (no remote work). Required skills: Professional skills Proven experience in cyber incident management and incident response (CSIRT/SOC). Expertise in security investigation (logs, suspicious activities, attack chain).

Knowledge of the Swiss regulatory framework (FINMA, LPD) is an asset. Knowledge or mastery of DLP solutions is a plus. Technical skills Proficiency with SIEM / EDR / SOAR solutions. Strong log analysis skills. Cloud knowledge (Azure, AWS, or equivalent). Scripting: Python, Bash, PowerShell.

Good understanding of malware analysis and forensics is an asset. Knowledge of pentesting is an asset. Good communication and teaching skills. Strong stress resistance and decision-making ability in critical situations. Leadership in crisis cells.

Education & experience Master's degree (or equivalent) in cybersecurity / computer science. 7+ years of experience in cyber incident response. Certifications appreciated: OSCP, CISSP, GCIH, GCFA, CHFI, CEH, ISO 27035, SANS FOR508- Languages French & English: professional level required.Why join us?

High-level cyber environment, exposed to complex challenges.