Security Operations Specialist (SecOps)

About the job

Your Tasks

• You design, analyse and optimise the security architecture of our software products (MyHighway & MyTunnel) and actively drive their secure further development according to the Security-by-Design principle in product development
• You integrate and automate security in our CI/CD pipelines (DevSecOps) – from SAST/DAST and dependency/container scanning to secure coding guidelines and hardening measures
• You are responsible for vulnerability management as well as the response to security incidents (Incident Detection & Response) and continuously develop the necessary security toolchain and processes
• You plan and conduct security assessments, architecture risk analyses and audits and ensure compliance with relevant requirements (e.g. ISO/IEC 27001, NIS2, CRA) throughout the entire development lifecycle
• You advise internal stakeholders (especially development, architecture and DevOps), develop policies and standards and conduct training and awareness measures

Your Skills and Talents

• You have a degree in computer science (FH/HF) – ideally with a focus on software engineering or cyber security – or possess a comparable qualification
• You bring several years of experience in software development and have specialised towards security architecture / secure software development
• You are familiar with modern architectural principles, secure coding practices and threat modelling methods (e.g. STRIDE) and know how to embed them in everyday development
• You have experience with DevSecOps tools and the integration of security into CI/CD pipelines
• You know the relevant standards and requirements, e.g. NIS2, CRA as well as BSI standards and BSI IT baseline protection, and can apply them to product development
• Knowledge in securing OT and IoT systems as well as in security processes and SOC concepts is an advantage
• You have very good German and English skills and can confidently conduct conversations and meetings in English

Why Us?

• An employer where your input matters
• Large scope for design and responsibility, opportunities to help shape the future of transport
• Interesting and varied tasks in a growing industry environment
• Further training that promotes and challenges your personal strengths
• A collegial working environment and open company culture with contact to the international SWARCO team
• Joint fitness training and regular barbecues on the company terrace

About Us

We at Bergauer AG build integrated solutions for the safe operation of technical systems in public infrastructures. As part of the international SWARCO Group, we have the know-how and technologies to support operators of urban and municipal traffic and building infrastructures on their way into the digital age. We develop our solutions in-house, thus guaranteeing maximum flexibility and Swiss reliability throughout the entire operational period.