Computer Security Reviewer

vor 2 Wochen

CH Geneva CERN European Organization for Nuclear Research Vollzeit

Your responsibilities

CERN runs a plethora of on-site and cloud-based IT services including MS Azure and Google Workspace cloud services as well as local control systems. Based on standard IT technologies but also on in-house developments, these IT services require a permanent adaptation of their security stance commensurate with CERN's risk appetite. The CERN Computer Security Team is mandated to protect the operations and reputation of the Organization, including those IT services, against any kind of cyber-threat.

As a successful candidate you will take an active role in reviewing and improving the security of those IT services:

  • Reviewing autonomously or inside a team newly developed or purchased IT services as well as those subject to essential changes with regards to security principles (like the CISv8 standard);
  • Providing consultancy and suggestions on furtherly improving the security posture of said IT services;
  • Maintaining a CERN-wide review plan and register for "security" as well as CERN's risk-register linked to "security"-related risks.

Furthermore, we offer you the possibility to delve into pure security operations, running separately your own security project(s), and contributing to incident handling in the CERN CSIRT.

Your profile

Skills and/or knowledge

  • Excellent knowledge of best practices in the field of "computer security", of secure software development and integration of IT security (features);
  • Proven experience in performing security reviews following industrial standards (ideally CIS, but also ISO 27k or similar);
  • Good knowledge of the Linux/UNIX operating system, network design, communication technologies and protocols, virtualization, databases, and in particular of shell scripting and programming (Python, and/or C). Other languages or technologies would be a plus;
  • Experience in securing either or both MS Azure and Google Workspace cloud services;
  • Proven expertise in automatic and manual vulnerability scanning and penetration testing (using tools like Nessus, Burpsuite, Metasploit), red/blue teaming, or similar.

Eligibility criteria:

  • You are a national of a CERN Member or Associate Member State.
  • You have a professional background in IT (or a related field) and have either:
    • a Master's degree with 2 to 6 years of post-graduation professional experience;
    • or a PhD with no more than 3 years of post-graduation professional experience.
  • You have never had a CERN fellow or graduate contract before.

Job closing date: July 3 at 23:59 PM CEST.

Job reference: IT-GOV-CSO GRAP

Contract duration: 24 months, with a possible extension up to 36 months maximum.

Target start date: 01-September-2024

What we offer

  • A monthly stipend ranging between 6212 and 6828 Swiss Francs per month (net of tax).
  • Coverage by CERN's comprehensive health scheme (for yourself, your spouse and children), and membership of the CERN Pension Fund.
  • Depending on your individual circumstances: installation grant; family, child and infant allowances; payment of travel expenses at the beginning and end of contract.
  • 30 days of paid leave per year.
  • On-the-job and formal training at CERN as well as in-house language courses for English and/or French.

About us

At CERN, the European Organization for Nuclear Research, physicists and engineers are probing the fundamental structure of the universe. Using the world's largest and most complex scientific instruments, they study the basic constituents of matter - fundamental particles that are made to collide together at close to the speed of light. The process gives physicists clues about how particles interact, and provides insights into the fundamental laws of nature. Find out more on

We are on a Quest. A Journey into discovery like no other. Bring your expertise to our unique work and develop your knowledge and skills at pace. Join world-class subject matter experts on unique projects, in a Quest for greater knowledge and deeper understanding.

Begin your CERN Quest. Take Part

Diversity has been an integral part of CERN's mission since its foundation and is an established value of the Organization. Employing a diverse workforce is central to our success.

  • Computer Security Reviewer

    vor 3 Wochen

    Geneva, Schweiz CERN Vollzeit

    Job Description Your responsibilities CERN runs a plethora of on-site and cloud-based IT services including MS Azure and Google Workspace cloud services as well as local control systems. Based on standard IT technologies but also on in-house developments, these IT services require a permanent adaptation of their security stance commensurate with...

  • Security Engineer, Product Security Engineering

    vor 4 Wochen

    CH-8004 Zürich Google Switzerland GmbH Vollzeit

    Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. The Product...

  • Senior Security Engineer, Product Security Engineering

    vor 1 Woche

    CH-8004 Zürich Google Switzerland GmbH Vollzeit

    Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. The Product...

  • Security Engineer, Off the Shelf Hardware Security

    vor 4 Wochen

    CH-8004 Zürich Google Switzerland GmbH Vollzeit

    Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. The Off the...

  • Security Engineer III, Product Security

    vor 4 Wochen

    CH-8004 Zürich Google Switzerland GmbH Vollzeit

    Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. The Product...

  • Security Engineer III, Product Security

    vor 1 Woche

    CH-8004 Zürich Google Switzerland GmbH Vollzeit

    Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. The Product...

  • Information Security Engineer, Product Security Engineering, Cloud CISO

    vor 4 Wochen

    CH-8004 Zürich Google Switzerland GmbH Vollzeit

    Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. Product...

  • Security Architecture

    vor 4 Wochen

    Geneva, Schweiz Union Bancaire Privee Vollzeit

    Security Architecture - Security Engineer- External Consultant until December 2024 Description Group COO is a vast and key division of the Bank, headed up by the group Chief Operating Officer, covering several departments supporting the client facing teams. It strives to provide both in-house and external clients with a first-rate service to...

  • Cyber Information Security Officer

    vor 4 Wochen

    Geneva, Schweiz Banque Syz SA Vollzeit

    If you are passionate about meeting client needs, want to challenge the status quo and be part of an innovative environment and future, the Syz Group can bring you what you are looking for. Working at Syz takes a blend of collaboration, entrepreneurial spirit and willingness to pull together. In return for your talent and dedication, you can expect a...

  • Senior Cyber Security Cloud Engineer

    vor 2 Wochen

    Geneva, Schweiz Vitol Vollzeit

    Job DescriptionThe Senior Cyber Security Cloud Engineer will be located in Geneva and will report to Vitol Group CISO.He will:Design and review security architectures for cloud-based applications and infrastructure.Conduct risk assessments and vulnerability assessments for cloud environments.Ensure cloud security practices comply with industry standards and...

  • Senior Cyber Security Cloud Engineer

    vor 1 Woche

    Geneva, Schweiz Vitol SA Vollzeit

    Vitol is a leader in the energy sector with a presence across the spectrum: from oil through to power, renewables and carbon.  From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over $2 billion of capital...

  • Security Engineer

    vor 2 Monaten

    CH-6300 Zug Sphynx Technology Solutions AG Vollzeit

    Job opening: Security Engineer Job Description and Responsibilities Conducting risk assessments and identifying security vulnerabilities. Developing and implementing security policies, procedures, and controls. Configuring and monitoring security tools such as firewalls, intrusion detection systems, and antivirus software. Investigating security...

  • Senior Cyber Security Cloud Engineer

    vor 1 Woche

    Geneva, Schweiz Vitol Vollzeit

    Company Description Vitol is a leader in the energy sector with a presence across the spectrum: from oil through to power, renewables and carbon. From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over...

  • Security Architect

    vor 1 Woche

    CH-6300 Zug Sphynx Technology Solutions AG Vollzeit

    Security Architect The Security Architect is responsible for designing and implementing the overall security architecture and solutions for the organization. They will collaborate with cross-functional teams to identify security requirements, assess risks, and develop strategies to mitigate security threats. Responsibilities Design and develop the overall...

  • Engineering Manager

    vor 4 Wochen

    Geneva, Schweiz Approach People Recruitment Vollzeit

    Engineering Manager – SecurityAre you keen on joining a fast growing and multicultural company? Would you enjoy being part of an exciting team, working on an amazing product ? To reinforce my client’s engineering development team, I am looking for an Engineering manager, in Geneva, Switzerland. Responsibilities As a member of my client’s team,...

  • Information Security Operations Officer

    vor 4 Wochen

    Geneva, Schweiz International Labour Organization Vollzeit

      Grade: P2  Vacancy no.: RAPS/2/2024/INFOTEC/02Publication date: 6th May 2024Application deadline (midnight Geneva time):  6th June 2024   Job ID: 11945 Department: INFOTEC Organization Unit: TMS Location: Geneva   Contract type: Fixed Term    The following are eligible to apply: ILO Internal candidates in accordance...

  • Security Architect and Source Code Review

    vor 2 Wochen

    ,Nordwestschweiz,,CH ONE Agency | IT Recruitment Experts Vollzeit

    ONE Agency | IT Recruitment ExpertsSecurity Architect and Source Code ReviewÜber unseren KundenFür unseren Kunden, der sich kontinuierlich weiterentwickelt und damit einen einzigartigen Mehrwert schafft, suchen wir:Ihr Aufgabenbereich- Überprüfung der aktuellen Systemsicherheitsmaßnahmen und Empfehlung und Implementierung von Verbesserungen-...

  • L1 Cyber Security Analyst

    vor 1 Woche

    CH-6300 Zug Sphynx Technology Solutions AG Vollzeit

    L1 Cyber Security Analyst The Cyber Security Analyst performs real time event and incident management processes of SOC, as well as internal security incidents evaluation and response following the event management guidelines and policies of SOC. Real-Time Event & Log monitoring and analysis using leading SIEM Technology Security Incidents identification...

  • L3 Cyber Security Analyst

    vor 1 Woche

    CH-6300 Zug Sphynx Technology Solutions AG Vollzeit

    L3 Cyber Security Analyst The L3 Security Analyst is responsible for providing advanced-level security analysis and incident response within the SOC team. They will be involved in proactive threat hunting, complex incident investigations, and handling security breaches. Proactive threat hunting and identification Complex incident investigation and...

  • Director of Information Security

    vor 1 Woche

    CH-8005 Zürich On AG Vollzeit

    ‹ Back to jobs Director of Information Security Locations: Zurich, LondonApply for this roleTechnologyTechnology In short In the dynamic landscape of On, the tech thrives much like a spirited runner: always moving, always improving. We are building technology that continues to supercharge the growth of On, helping to ignite the human spirit through...