Building the bank of tomorrow takes more than skills.
It means combining our differences to imagine, discuss, code, develop, test, learn… and celebrate every step together. Share our vibes? Join Swissquote to unleash your potential.
We are the Swiss Leader in Online Banking and we provide trading, investing and banking services to +650’000 clients, through our performant and secured digital platforms.
Our +1200 employees work in a flexible way, without dress code and in multicultural teams.
By having a huge impact on the industry, they are growing their skills portfolio and boosting their career in a fast-pace environment. Have a look behind the scenes by checking Humans of Swissquote on Instagram.
We are all in at Swissquote. As an equal opportunity employer, we welcome candidates from all backgrounds, experiences and perspectives to join our team and contribute to our shared success.
Are you all in? Don’t be shy, apply!
Job DescriptionJoin our Security Operations Center (SOC) Team, a team of four engineers within the Cybersecurity Department. You will work in a dynamic environment, gaining key skills in security automation and incident response while becoming familiar with the banking and finance threat landscape.
Under the supervision of the Security Operation Manager, you will take part in the following projects:
- Connector Development: Developing Python-based connectors to integrate security tools (SIEMs, firewalls, EDR, IAM, threat intelligence platforms) with our SOAR platform using Python 3.9+, REST APIs, and standard protocols.
- API Integration & Data Normalization: Designing REST APIs and webhook handlers for bi-directional communication between systems. Transforming security data from heterogeneous sources into unified data models.
- Technical Documentation: Writing clear technical documentation for integrations, deployment procedures, API specifications, and troubleshooting guides.
- Collaboration: Working closely with the Playbook Engine Developer Intern to define standard connector interfaces and ensure seamless integration with automation workflows.
- Good proficiency in Python
- Experience with async programming or concurrent execution
- Basic understanding of REST APIs, HTTP protocols, and webhooks
- Knowledge of JSON, YAML, and data serialization formats
- Interest in cybersecurity and incident response
- Experience with version control (Git)
Nice-to-Have Skills
- Experience with SOAR platforms (Splunk SOAR, Cortex XSOAR, etc.)
- Familiarity with security tools (Splunk, QRadar, Chronicle, CrowdStrike)
- Knowledge of authentication protocols (OAuth, API keys, mTLS)
SQ2
Top Skills
What We Do
We are Switzerland’s leading bank in online financial services and offer our clients innovative and state-of-the-art solutions to meet their investment needs. Headquartered in Geneva, Switzerland, we have additional offices in Zurich, Luxembourg, London, Cyprus, Dubai, Hong Kong, Malta, Singapore, and Bucharest. Swissquote Group Holding Ltd has been listed on the SIX Swiss Exchange (symbol: SQN) since May 2000 and is regulated by the Swiss Financial Market Supervisory Authority (FINMA). As well as various online trading products - including stocks, bonds, funds derivative products, and cryptocurrencies – Swissquote also provides Forex, Robo-Advisory, and Mortgages solutions. Today, we are proud to deliver our services to + 500’000 clients with access to more than 60 stock exchanges worldwide and can trade over 3 million products through performant and secure platforms. Swissquote is the marketing brand for the activities of Swissquote Bank Ltd (Switzerland) regulated by FINMA, Swissquote Bank Europe SA (Luxembourg) regulated by the CSSF, Swissquote Bank Ltd (UK) regulated by the FCA, Swissquote Financial Services (Malta) Ltd regulated by the MFSA, Swissquote MEA Ltd. (UAE) regulated by the DFSA, Swissquote Pte Ltd (Singapore) regulated by the MAS, Swissquote Asia Limited (Hong Kong) licensed by the Hong Kong SFC.
