Technical Analyst Vulnerability Management

This is how you can contribute

• Analysing technical vulnerabilities in hardware and software, working with producers to rectify vulnerabilities, informing and providing support to operators of critical infrastructure
• Planning and running a bug bounty programme, communicating with ethical hackers, evaluating and triaging security gaps
• Carrying out or managing technical analyses and security testing, drawing up countermeasures, writing reports and publicising them
• Developing concepts for new tools and solutions, finding innovative solutions, making effective use of new technologies
• Maintaining active dialogue with partner organisations in Switzerland and abroad, analysing the overall situation with regard to cyberthreats, taking preventive countermeasures

This makes you unique

• Tertiary-level or similar qualification in IT or cybersecurity
• In-depth knowledge of the current cyberthreat situation and methods of attack, knowledge of cybersecurity products gained from work in software development or as a penetration tester or bug bounty hunger is an advantage
• Good communication and coordination skills; willing and able to work with partner organisations and engage them in active dialogue
• Interest in developing and implementing innovative ideas within a small team
• Very good knowledge of an official language and English; active knowledge of a second official language

In a nutshell

Do you have proven experience identifying, analysing and managing security vulnerabilities? Are you a naturally curious person who enjoys working as part of a team? Then we're looking forward to receiving your application!

Your commitment to cyber security in Switzerland

The National Cyber Security Centre (NCSC) is the federal government's centre of expertise for matters of cyber security and the first point of contact for businesses, public authorities, educational institutions and the public on cyber-related issues.

The NCSC raises awareness and alerts the public and public authorities to cyberthreats and cyberattacks. It processes reports on incidents and threats in cyberspace, and provides technical analysis to help operators of critical infrastructure, in particular, respond to cyberattacks. The NCSC also makes recommendations on measures to counter cyber incidents and address vulnerabilities.