IT Security Analyst – Cyber Defence Center (CDC)

pThe Central IT provides IT services for students, researchers, institutes, faculties, and central services of the University of Zurich.

For our Cyber Defence Center (CDC), we are looking for a committed IT Security Analyst who will strengthen our operational cyber security and actively contribute to the detection, analysis, and handling of security incidents as well as the further development of our detection and response capabilities. /ph3IT Security Analyst -- Cyber Defence Center (CDC) /h3h3Responsibilities /h3ulliAnalysis, triage, and handling of security alerts and incidents from SIEM, Microsoft Defender XDR, endpoint, network, identity, cloud, and other security sources /liliConducting in-depth analyses and threat hunting in the Microsoft Defender portal, especially using Advanced Hunting and KQL or other tools in our SIEM /liliCorrelation and evaluation of events across different systems, log sources, and security products /liliInvestigation of suspicious activities, attack indicators, and possible compromises as

well as initiation of appropriate incident response measures /liliBlocking and managing indicators of compromise (IOC) such as IP addresses, domains, URLs, or hashes, etc. /liliFurther development of detection, hunting, and response use cases in the SIEM as well as within the Microsoft 365 and Defender security platform /liliDevelopment and optimisation of KQL queries, detection rules, alerting logics, and automations /liliCollaboration in vulnerability management, especially in the assessment, prioritisation, and follow-up of identified vulnerabilities /liliContinuous improvement of our security monitoring, detection, and response processes in the CDC /liliDocumentation of incidents, analyses, and measures as well as collaboration in IT security reporting /li /ulh3Profile /h3pFor this demanding position, we are looking for an analytically strong, independent, and trustworthy individual

with enthusiasm for technical security analysis, threat hunting, and incident response. /pulliA completed degree, vocational baccalaureate, or higher education in computer science, cyber security, or a comparable qualification /liliPractical professional experience in security operations, SOC, CDC, incident response, or IT security /liliVery good knowledge of SIEM systems, security logs, and detection use cases /liliGood knowledge of the Microsoft security platform, especially Microsoft Defender XDR, Defender for Endpoint, Microsoft 365 Security, and Advanced Hunting /liliPractical experience with KQL (Kusto Query Language) for analysing, correlating, and detecting security-relevant events /liliExperience in exposure management, including vulnerability management /liliSound knowledge in the areas of network, endpoint security, identity, and cloud security as well as common attack and

detection methods /liliExperience in analysing and handling indicators of compromise (IOC) and security incidents /liliScripting skills, for example in PowerShell, Python, or Bash, are an advantage /liliStructured, precise, and efficient working style as well as good analytical and communication skills /liliGood German and English language skills /li /ulh3We offer /h3pOur employees benefit from diverse and attractive offers. /ppLearn more at: /ph3Workplace Central IT /h3pApplication information Further information Questions about the position Sacha Schweizer Head of Cyber Defence Center /ph3Working at UZH /h3pAs the largest university in Switzerland, the University of Zurich offers a variety of attractive positions in different academic fields and professional areas.

With around 10,000 employees and currently 12 vocational profiles for apprentices, the university provides an inspiring working environment in cutting-edge research and education. /ppPut your talent and skills to use with us. /ppLearn more about UZH as an employer! /p