Incident Engineer (w/m)

ppÄrztekasse Genossenschaft provides business process outsourcing and eHealth solutions to health professionals so they get relief from administration and can focus on medical work. /p pÄrztekasse is renewing its entire datacenter and the products affected by this transformation. To support this digitalization step, we are looking for smart and experienced engineers to contribute and shape clever and creative solutions for a meaningful industry. /p pPensum: 80-100%br/Start: immediately or by appointmentbr/Duration: unlimitedbr/Location: Geneva area (Thônex) or Zurich area (Urdorf) /p h3Main Tasks /h3 ul liTriage, investigate and resolve endpoint security alerts from Microsoft Defender across employee machines /li liDetect, analyse and respond to security incidents across our endpoints, infrastructure and applications /li liLead incident response activities and coordinate remediation with engineering and operations teams /li liTune detection rules to reduce false positives and continuously improve alert quality /li liDevelop and maintain incident response playbooks, processes and tooling /li liMonitor security events and alerts (Microsoft Defender, SIEM, IDS/IPS) and drive continuous detection improvements /li liConduct post-incident reviews and root-cause analysis, and track corrective actions /li liImplement security best practices and harden systems against emerging threats /li liParticipate in future on-call rotation /li /ul h3Requirements /h3 ul li3+ years of experience in security incident response, SOC or a similar role /li liHands-on experience with Microsoft Defender for Endpoint (EDR) and endpoint security /li liStrong understanding of security monitoring, SIEM and detection engineering /li liKnowledge of attack techniques and incident handling frameworks (e.g. NIST, MITRE ATTCK) /li liExperience with Windows and Linux security; Kubernetes is a plus /li liScripting and automation skills, preferably in Bash, Python or Go /li liRelevant certifications (e.g. GCIH, GCIA, OSCP) are a plus /li liAnalytical, calm under pressure and a strong communicator; English required, German and French a plus /li /ul h3Further information /h3 pA stimulating environment helps to find cool solutions to challenging complex requirements. We work in small agile teams where you can have impact and influence. You will find sharp engineers to have inspiring discussions with. We are solution-driven, but we don’t neglect the fun factor. /p /p #J-18808-Ljbffr