Cybersecurity Engineer (Threats, Exposure, and Risks)

Project overview

Job Title: Cybersecurity Engineer (Threats, Exposure, and Risks)

Reference: 26-04-6613-003

Responsibilities

Education:

Primary Skills:

Important Skills:

• Organize threat monitoring and establish a structured capability for collecting, qualifying, and analyzing cyber threat information.
• Identify and characterize threats, and analyze collected information to identify those relevant to the organization.
• Assess the relevance of threats to the IS based on assets, technologies, exposure, and existing protection measures.
• Assess the risk associated with identified threats, taking into account the specific context.
• Alert when the risk level justifies it.
• Propose actions for detection or compromise hunting.
• Coordinate the implementation of decided measures with the teams responsible for assets and security capabilities.
• Monitor the effective reduction of exposure until risk closure.
• Produce indicators and summaries adapted to different decision-making levels.
• Implement and operate the threat processing chain: identification of vulnerabilities and qualification of threats through multi-source collection (source reliability, enrichment, contextualization), active exploitation search, actors, campaigns, and IoCs, then search for affected products and identification of exposed assets in the IS.
• Prioritize by cross-referencing CVSS, EPSS, KEV, exposure, criticality, and protections, define measures (patch, mitigation, hardening, blocking, enhanced monitoring), adapt SOC rules, and launch Threat Hunting if necessary.
• Confirm the disappearance of exposure, search for any signs of compromise, and update knowledge, procedures, and detection capabilities.
• University Master's degree in Computer Science, EPF Engineering Diploma, or equivalent.
• Proven experience in cyber threat intelligence, vulnerability management, exposure management, or cyber risk analysis, with a demonstrated ability to relate these disciplines.
• Mastery of threat intelligence concepts and tools, and threat qualification.
• Demonstrated ability to cross-reference threat information, vulnerabilities, technical exposure, asset criticality, and protection measures to qualify and prioritize cyber risk.
• Ability to link vulnerabilities, product, threat, TTPs, assets, and actions to be taken.
• Mastery of the main vulnerability qualification and prioritization mechanisms (CVSS, EPSS, KEV, or equivalent) and ability to contextualize them with internal exposure and criticality.
• Very good understanding of asset management principles, IS mapping, and cyber exposure management.
• Ability to leverage inventories, CMDBs, vulnerability scanners, and other data sources to identify assets affected by a threat.
• Mastery of cyber risk analysis and ability to produce a contextualized risk assessment from threat, vulnerability, exposure, criticality, and existing control data.
• Ability to translate threat analysis into concrete and prioritized measures: patching, mitigation, hardening, blocking, enhanced monitoring, detection, or hunting.
• Understanding of attack techniques (MITRE ATT&CK, TTPs, IoCs, etc.).
• Good understanding of SOC operations and ability to formulate detection or Threat Hunting requirements.
• Knowledge of EDRs.
• Knowledge of vulnerability management tools.
• Ability to reason with incomplete or uncertain information and to explain the level of confidence associated with an analysis.

Nice to have

Required Qualities:

• Scripting (PowerShell, etc.).
• Experience with SPL or an equivalent query language.
• Analytical mindset.
• Technical curiosity.
• Synthesis skills.
• Rigor.
• Ability to work under pressure.
• Ability to communicate with technical and non-technical stakeholders.

Project details

Geneva

Desired Start Date: 01.01.2027

100%

Compensation: from 149,000 CHF / year

Job Description and Context:

We are seeking for a client, a public administration in Geneva, a cybersecurity engineer specialized in threats, exposure, and risks to strengthen its operational cybersecurity capabilities.

The successful candidate will establish a structured capability for collecting, qualifying, and analyzing cyber threat information. This will enable the organization to anticipate emerging threats, identify exposed components of the IS, assess the associated risk level, and trigger, with the correct priority, appropriate prevention, detection, hardening, monitoring, or remediation measures. Long-term assignment (up to 5 years).

• Start: flexible
• Location: Geneva, Geneva, CH
• Languages: French