Security Operations Engineer., Cheseaux-sur-Lausanne

Stimulating. Motivating. Challenging.

Leveraging its long-standing expertise in securing digital content as well as fighting piracy, Kudelski Security, a division of the Kudelski Group, is a provider of cybersecurity solutions and services focused on protecting data, processes and systems for companies and organizations around the world, safeguarding their assets at a time of increasingly remote communications.

Reference: 15715 Publication Date: 27-02-2026

Location: Cheseaux, Switzerland

Mission As part of the Kudelski Security’s Managed Detection and Response (MDR) department, the Security Engineer is responsible for delivering to our clients customized MDR services that complement the standard service offering. The engineer acts as the privileged liaison between the client and the Cyber Fusion Center for all securityoperations matters, interacting intensively with the Cyber Fusion Center and with the client staff.

If you:

Are passionate about cybersecurity and constantly develop your knowledge

Are customer‑oriented and highly motivated by providing excellent client satisfaction

Are at ease in a fast‑paced environment and can step outside your comfort zone

Are a self‑driven technology professional familiar with Security Operations

Responsibilities Threat Monitoring

Be the main point of contact of the Cyber Fusion Center at the client’s side

Support standard Cyber Fusion Center activities such as threat monitoring, security service management, endpoint detection and response, and vulnerability scanning services

Investigate and remediate incidents escalated by the Cyber Fusion Center or Client’s internal units

Write specific incident response playbooks for the Client

Define, test, deploy or perform specific use cases, correlation rules, threat hunting activities and threat intelligence activities for the client

Support large‑scale incident response activities

Service improvement

Perform rules tuning of client SIEM in operation

Support rules factory programs in improving the global set of detection

Qualify, analyze, and provide recommendations for new standard data source requests

Support Product teams to build new services that fit with Operations capabilities

Contribute to client’s security projects

Implement new tools or scripts to increase security operations’ efficiency

General Responsibilities

Take responsibility for customer satisfaction and overall success of managed services

Recommend improvements for Standard Operating Procedures

Propose enhancement of tools and workflow

Document actions in tickets to effectively communicate information internally and to customers

Adhere to policies, procedures, and security best practices

Role expectations Being able to integrate and build trust with the client’s team and to work in the client’s environment; working comfortably with different teams both in Kudelski Security and in the client’s environment.

Requirements / Profile You are

Team player who is willing to work closely with internal stakeholders to optimise deliveries

Transparent and open to constructive feedback to help us aim at the greater good

At ease solving complex problems by seeking end‑to‑end and scalable solutions

Dynamic, with strong interpersonal and communication skills

Able to handle and prioritise parallel tasks with multiple interfaces

Autonomous, self‑taught, and willing to continuously develop new skills and knowledge

Fluent in English

You have

Minimum 5 years’ experience in information security, particularly in cyber operations

Excellent client‑facing service skills

Knowledge of incident response processes (detection, triage, incident analysis, remediation, and reporting)

Experience with SIEM (Splunk, Sentinel), EDR/NGAV (Crowdstrike, MDE), vulnerability scanning, and managed attacker deception

Experience reviewing and analysing log data and network packet captures

Strong knowledge of Windows/Linux OS, network protocols, and scripting languages (Python)

Good knowledge of cloud computing infrastructures and platforms

Excellent knowledge of the security landscape and different visibility solutions (SIEM vs EDR)

Professional proficiency in French and English

Plus

Technical certifications on vendors’ products, in particular Splunk

Additional languages are an asset

Reference: 15715 Publication Date: 27-02-2026

#J-18808-Ljbffr