Security Analyst

About Hirslanden

Hirslanden stands for first-class, responsible, and individual healthcare that puts people at the center. From birth to old age and from prevention to healing – at any time, physically and digitally – the Hirslanden Group, together with private and public cooperation partners, focuses on the further development of the "Continuum of Care".

Our focus is not only on the well-being of our patients but also on that of our employees. As a traditional Swiss company with international ties to the Mediclinic Group and its divisions, we benefit from global exchange and continuous development.

Responsibilities

• Prioritization, coordination and processing of security support tickets from internal teams as well as MDR/SOC alerts, including support in analyzing and handling complex security incidents and advanced threats (including threat hunting and remediation).
• Continuous monitoring of the threat landscape and participation in the evaluation and improvement of existing security controls and detection/response capabilities.
• Review, harmonization and optimization of security tool configurations (e.g., VPN, network, firewalls) to ensure a consistent security architecture.
• Further development of vulnerability management, including evaluation, prioritization and tracking of vulnerabilities, as well as implementation of corresponding measures.
• Expansion of security operations through automation and integration of workflows, as well as support for security awareness and processing of phishing incidents.
• Creation and further development of security reports and dashboards (e.g., XDR compliance, KPIs, asset transparency).

Qualifications

• Completed degree in Information Security, Computer Science or a related field. Alternatively, an equivalent practical qualification and initial practical experience or a strong interest in the areas of Cybersecurity, Security Operations or IT Operations with a security focus.
• Experience or strong interest in analyzing and handling security incidents and in dealing with SOC, MDR or comparable services.
• Sound or developing understanding of modern threat landscapes, attack techniques and fundamental security principles; also solid know-how in IT infrastructures, networks, security controls (endpoint, firewall, VPN, e-mail, monitoring) and vulnerability management.
• Experience or strong interest in security operations platforms (e.g., Cortex XDR/XSOAR, Microsoft Defender/Sentinel) and in integrating systems via interfaces (APIs, JSON, webhooks).
• Knowledge in scripting and automation (e.g., PowerShell, Python) and experience or interest in building and further developing workflows and automations across system boundaries.
• Experience in collaborating with various stakeholders and an analytical, structured, and solution-oriented approach to work.
• Very good German and English skills.

Benefits

• Varied menus in our staff restaurant at a preferential price
• Fitness 24/7: Free access to our fitness room (incl. lunch classes)
• Free employee counseling: Professional support for professional or personal concerns, whenever you need them
• More than 5 weeks of vacation as part of our Freizeit Plus Program - for the perfect work-life balance

You can benefit from many advantages from the first week.

You will work in a dynamic and security-critical environment where you actively contribute to the further development of cybersecurity. You will have the opportunity to help shape processes, build automations, and implement sustainable improvements. We are looking for personalities with different levels of experience – what counts is your motivation to develop further in the field of Security Operations and to take responsibility.

Are you ready to get started in an innovative environment? With us, you can fully develop your strengths, your know-how, and your skills. On your first day, we will give you a warm welcome and ensure that you feel comfortable with us from the start.