Cybersecurity Senior Engineer

Cybersecurity Senior Engineer

Phoeniqs is seeking a hands-on Cybersecurity Senior Engineer to join the Engineering organization. This role is responsible for the design, implementation, and operation of key security solutions (SIEM, EDR/XDR, IDS/IPS, Vulnerability Management, PAM, etc.) while ensuring that European and Swiss regulatory frameworks are directly embedded into our technical controls and daily operations.

The ideal candidate combines deep, practical expertise in deploying and managing security architecture with a strong understanding of compliance frameworks. You will build, automate, and operate systems that are secure and compliant by design, turning regulatory obligations into scalable, continuously monitored technical capabilities.

---

Key Responsibilities

Security Solutions Engineering & Operations (Core Focus):

• Design & Implementation: Architect, deploy, and configure enterprise security technologies including SIEM/SOAR, EDR/XDR, IDS/IPS, Vulnerability Management, and Identity Access Control (PAM/IAM).
• Security Operations & Threat Management: Monitor security alerts, perform threat hunting, manage incident response workflows, and optimize detection rules to reduce noise and lower mean time to detect/respond (MTTD/MTTR).
• Vulnerability & Exposure Management: Operationalize continuous vulnerability scanning, prioritize risk-based patch management, and perform technical risk assessments across cloud, network, and system architectures.
• Automation & Orchestration: Drive security automation (Policy-as-Code, Infrastructure-as-Code, SOAR playbooks) to streamline incident response and continuous monitoring.

---

Regulatory & Certification Alignment:

• Technical Control Mapping: Operationalize requirements from regulations and frameworks into concrete security tool configurations, architecture patterns, and enforcement policies:
  • GDPR and Swiss Federal Act on Data Protection (revDSG)
  • NIS2 Directive
  • Spanish “Esquema Nacional de Seguridad” (ENS)
  • ISO 27001 / 27017 / 27018 & SOC / ISAE frameworks
  • EU AI Act (technical/operational implications) and FINMA expectations
• Continuous Compliance Enforcement: Ensure security platforms inherently generate automated, continuously validated, and auditable evidence to support external audits and certifications without manual overhead.
• Control Remediation: Identify gaps between regulatory mandates and actual system behavior, deploying technical controls to bridge any deficiencies.

---

Cross-Functional Security Enablement:

• Architecture Collaboration: Work with platform and software engineers to integrate security controls directly into CI/CD pipelines, cloud workloads, and deployment workflows.
• Customer & Audit Assurance: Support audit readiness and provide technical explanations of security controls for customer assurance and compliance verification.

---

Requirements & Profile

Qualifications:

• Education: Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field.
• Experience: Minimum of 5+ years of hands-on experience as a Cybersecurity Engineer, Security Operations Engineer, or Systems Security Specialist.
• Languages: Full professional proficiency in English (mandatory).
• Technical Expertise:
  • Demonstrated track record in designing, deploying, and operating SIEM, EDR/XDR, IDS/IPS, and Vulnerability Management solutions.
  • Solid command of network security protocols, system hardening, and cloud security controls (AWS, Azure, or GCP).
  • Hands-on scripting and automation capabilities (Python, Bash, Ansible, etc.).
• Compliance & Framework Knowledge:
  • Strong understanding of translating frameworks like ISO 27001, NIS2, ENS, GDPR, or NIST CSF into enforceable technical rules and configurations.
• Mindset: Strong hands-on, problem-solving mindset focused on operational excellence, automation, and measurable security outcomes rather than paper compliance.

---

Desirable / preferred:

• Professional Certifications: Recognized industry security certifications such as CISSP (Certified Information Systems Security Professional), CCSP, CEH, GSEC/GIAC, or vendor-specific security engineering certifications (e.g., AWS Security Specialist, Azure Security Engineer, CCNP Security).
• Languages: German proficiency (B2 or higher) is a strong plus.