Senior Security Analyst

LOCATION: ZURICHTechnologyIn shortAt On, our technology moves as fast as our runners: always evolving, always pushing boundaries. We're building a world-class platform to ignite the human spirit through movement, and our Information Security team is the trusted guardian of that mission. Join a collaborative team of curious minds who view security not as a blocker, but as an accelerator. We are explorers in a dynamic landscape, constantly venturing into new territories of technology and threat defense. We are looking for a Senior Security Analyst who shares this passion—someone who wants to move beyond the conventional SOC and help build the future of security operations at On.Your MissionAs a senior member of our security operations team, this is a deeply hands-on role where you will act as a strategic defender at the heart of our ecosystem. Your mission is to tackle expert-level (L3) challenges, from in-the-weeds incident response and proactive threat hunting to engineering robust detection capabilities. You'll not only solve the most complex security incidents yourself but also use your findings to build a more resilient environment for tomorrow.Lead the hands-on investigation of critical security incidents, conducting deep-dive technical analysis and coordinating remediation with our engineering teamsServe as a senior escalation point during an on-call rotation, ensuring a rapid and effective response to critical security incidents outside of working hoursMaster our primary security tool, Google SecOps (Chronicle), by personally developing sophisticated detection rules and optimizing our security event pipelineProactively hunt for hidden threats within our fast-paced Cloud environment, getting your hands dirty with data to turn hypotheses into actionable intelligenceShape our security strategy by contributing to threat modelling, vendor risk assessments, and the continuous evolution of our detection and response programMentor team members and act as a subject matter expert, sharing your practical knowledge and elevating the capabilities of the entire security functionYour storyYou are an experienced security professional with a passion for technical details and a proactive, problem-solving mindset. Your background demonstrates a commitment to excellence in security operations.You bring 5+ years of experience in a hands-on security operations or incident response role, with a proven focus on L3 analysisYou possess strong proficiency with SIEM platforms, specifically Google SecOps (Chronicle), including building custom detection rulesYou are comfortable and familiar with navigating and securing cloud environments, ideally Google Cloud (GCP)You have a proactive and inquisitive mindset, with demonstrable experience in threat hunting techniques and familiarity with frameworks like MITRE ATT&CKYou are a natural collaborator with the ability to communicate complex technical issues to both technical and non-technical stakeholdersAbout the TeamWe are a globally-distributed team within the broader Technology function, organized into five core domains: Cyber Defence, Security Engineering, Security Architecture, IT GRC, and Endpoint Security.ZürichJust by the banks of the Limmat you'll find our largest global hub in Zürich West – On Labs – where you can hike up 12 floors through our custom-built spiral trail.Förrlibuckstrasse 190,8005SwitzerlandWhat we offerOn is a place that is centered around growth and progress. We offer an environment designed to give people the tools to develop holistically – to stay active, to learn, explore and innovate. Our distinctive approach combines a supportive, team-oriented atmosphere, with access to personal self-care for both physical and mental well-being, so each person is led by purpose.On is an Equal Opportunity Employer. We are committed to creating a work environment that is fair and inclusive, where all decisions related to recruitment, advancement, and retention are free of discrimination.Build the better youWhat to expectWe want to set everyone up for success, so here's the lowdown on how we hire. Our process is a two-way street – bringing you into our culture, while helping us learn how you think.Our full process can last about eight weeks from application to offer, because we care about getting it right. These steps explain how we usually do things.Before you get started, feel free to consider if you want to work with us. Strange question? Well, we give people a lot of space to navigate their day-to-day and that style isn't for everyone. We want you to be passionate about what you do and be sure this is the right fit. Because when skills and passion combine – it creates that 'Wow' moment.