Cyber Defence Analyst

Detection and Defence against Cyber Threats: Monitoring and analysing security events with SIEM and EDR systems to identify and defend against cyber threats.

Incident Response and Forensics: Conducting event triage, analyses and response to security incidents according to established cyber defence processes and frameworks.

Threat Intelligence and Prevention: Applying cyber threat intelligence and preventive IT security tools to continuously optimise the security posture.

Vulnerability Management: Detection, assessment and mitigation of vulnerabilities in the IT infrastructure.

Projects and Automation in Collaboration: Participation and design in projects to further develop and automate SOC processes. Close cooperation with internal IT teams as well as external partners for efficient coordination of security measures and incident response.

Experience: Several years of practical experience with SIEM systems and other SOC-relevant security tools as well as solid experience in the IT security environment.

Personality: Strong analytical thinking, high problem-solving skills and curiosity to assess and classify complex cyber threats.

Education: Completed training in computer science as well as relevant further education or certifications in the field of cyber security (e.g. OSCP).

Language: Very good German and English skills, both spoken and written.

IT BS is the internal IT service provider of the Canton of Basel-Stadt and belongs to the Finance Department. The department provides the collaboration and communication infrastructure for mobile and stationary IT workplaces and the associated support. Additionally, IT BS continuously develops various offerings for the public in the area of eGovernment and digitalisation. A functioning IT is central to the efficient operation of the cantonal administration.

The cantonal administration of Basel-Stadt operates a central Security Operations Center (SOC) to protect its digital infrastructure and critical services. To strengthen our SOC team, we are looking for a person with strong analytical thinking and solid technical understanding for the early detection and defence against cyber threats. Together with your team, you ensure the cyber security of our critical IT infrastructure.