We are looking for a senior SOC Analyst L3 to join our cybersecurity team. You will lead advanced threat detection and incident response for our clients, keep improving their security posture, and act as the technical reference and mentor for the SOC team.
Responsibilities
- Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques
- Lead and coordinate incident response, from investigation and containment through eradication and recovery
- Serve as the technical escalation point for L1 and L2 analysts
- Hunt for suspicious activity based on threat intelligence feeds and indicators of compromise
- Improve security monitoring processes so incidents are detected and handled faster
- Perform forensic analysis on complex incidents
- Run regular security assessments and vulnerability scans to find and reduce risk
- Create knowledge base articles for handling medium and high severity incidents
- Work with client IT and security teams on security policies, procedures and best practices
- Write clear reports on incidents, trends and SOC performance for management
- Coach and mentor junior analysts to build their skills
Your profile
- Bachelor's degree in computer science, information security or a related field
- 5+ years of hands‑on SOC experience, with a strong focus on advanced detection and incident response
- Experience deploying and running EDR, XDR and SIEM solutions
- Skill with query languages (KQL, SPL or similar), SOAR implementation and product integrations
- Strong knowledge of networks, Windows and Unix/Linux systems, infrastructure and cloud services
- A thorough understanding of the incident response process: detection, triage, analysis, remediation and reporting
- Strong analytical skills and the ability to stay calm under pressure
- Clear communication with both technical and non‑technical people
- A client focus and a team mindset
- Fluent in English, with very good French and/or German
Cloud environments such as Azure, AWS, GCP, …
Nice to have
- Certifications such as SC‑200, GCIH, GCIA, GCFA, CISSP or CEH
- Scripting in Python, PowerShell or Bash
- Other languages
Skills Required
- Bachelor's degree in computer science, information security, or a related field
- 5+ years of hands-on SOC experience focused on advanced detection and incident response
- Experience deploying and operating EDR, XDR, and SIEM solutions
- Experience with KQL, SPL, or similar query languages
- Experience with SOAR implementation and product integrations
- Strong knowledge of networks, Windows, Unix/Linux systems, infrastructure, and cloud services
- Understanding of incident detection, triage, analysis, remediation, and reporting
- Fluent English and very good French and/or German
- SC-200, GCIH, GCIA, GCFA, CISSP, or CEH certification
- Scripting experience in Python, PowerShell, or Bash
- Knowledge of additional languages
What We Do
With more than 2,300 experts, the ELCA Group is a leading independent Swiss IT service and solution provider, specialized in IT consulting, Cybersecurity, Cloud, Data & AI, Digital experience, Software development, Business applications and systems' integration across all industries. ELCA helps its clients to better compete in the digital era and gain in agility. The privately held company has offices in Pully (HQ), Zurich, Geneva, Bern, Basel, Rapperswil and Fehraltorf, as well as offshore centers in Italy, Spain, Mauritius and Vietnam.
