20 ähnliche Stelle(n) gefunden


Senior Offensive Security Expert

Bewertung abgegeben
SIX operates the infrastructure underpinning the Swiss financial sector and offers a comprehensive range of services around the world in the fields of securities trading and settlement, financial information and payment transactions.
Senior Offensive Security Expert

We drive the transformation of the financial markets. That's why we invest in bright minds, in their ideas, knowledge and development. We do that by combining our best sides.

If you would like to find out why stability makes us so agile, why experience makes us so curious and why empathy makes us so impactful, apply now for the position of

Senior Offensive Security Expert


80-100 %


Our Security Controls Team takes care of penetration tests conducted within SIX. Beside this, we are responsible to prepare and run dedicated red and purple team exercises and lead the bug bounty program. We coordinate remediation actions and support the Information Security Officers to test and assess deep technical matters. Our team is part of the risk organization. As such its core mission is to provide information, awareness, guidance and assistance to reduce the risks. Besides that we are helping to enhance our regulations.

What You Will Do

  • Actively managing our approach for blue and purple team testing, taking care of penetration tests within SIX worldwide
  • Participate in and setting up purple teaming exercises with our Security Operations Center (SOC) and CSIRT Organization. Taking care and tracking of the implementation of resulting mitigation strategy
  • Challenge concepts for security monitoring use cases, set priorities, monitor the coverage, effectiveness and help to mature the use cases along with cyber security frameworks (MITRE ATT&CK / NIST)
  • Assess the maturity of our application- and infrastructure-security and our security incident response processes and the security coverage in general (incl. tooling)
  • Guide and sharpen the security processes based on outcomes during test experience. Perform analyses and ad-hoc technical deep dive assessments
  • Use your security knowledge to provide security consultancy and advice to other teams as part of your duties

What You Bring

  • Demonstrated enthusiasm & passion for Offensive Information Security (e.g. on GitHub, Blogs, Twitter, presentations, conference talks, etc.)
  • Extensive knowledge in working with and adapting penetration testing software
  • Focused on delivering results and a solution-oriented way of working, an open-minded personality, confident communicator and good presentation skills
  • Several years of experience as a Penetration Tester or Red Teamer (ideally with certifications such as OSCE, OSCP or similar)
  • Excellent written and verbal communication skills in English and ideally also in German

If you have any questions, please call Philipp Röhl +41 58 399 85 43.

For this vacancy we only accept direct applications.

Diversity is important to us. Therefore, we are looking forward to receiving applications regardless of any personal background.


Bewertung hinzufügen

Geben Sie hier Ihre Bewertung für die Firma SIX ab!

Bewertung abgegeben