{"id":2937495,"url":"https://alion.io/job/-ao-foundation-senior-it-security-engineer","title":"Senior IT Security Engineer","company":{"id":1850019,"name":"- AO Foundation","domain":"aofoundation.org","url":"https://alion.io/company/aofoundation-org","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Davos, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":94000,"max_usd":218000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Copilot","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-09-24T02:00:00Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-21T20:58:14Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Short Description\nWe are seeking a Security Engineer to lead the automation of SOC Level 1 and Level 2 processes and support advanced incident response. This role is critical to future security operations. The engineer will design, implement, and maintain automated runbooks using Microsoft’s security technologies and AI capabilities, ensuring scalable and efficient security operations.\nMain Responsibilities\nDevelop and maintain automated SOC Level 1 and Level 2 runbooks and playbooks using Logic Apps, Power Automate, and AI Foundry components\nEngineer detection rules, workbooks, and playbooks in Microsoft Sentinel/Microsoft XDR platforms\nIntegrate and optimize Microsoft Defender for Endpoint, Identity, Cloud, and Office 365 within the XDR framework\nApply AI-driven threat detection and response using Microsoft Copilot for Security and related tools\nCollaborate with internal teams and external partners to embed security into CI/CD pipelines and IT delivery models\nProvide SOC Level 3 support for complex incidents, including forensic analysis and threat containment\nContribute to the DevSecOps organization\nSupport the implementation of an ISO 27000-aligned ISMS and assist with governance and compliance efforts\nMain Requirements\nBachelor’s degree in Information Technology, Computer Science, or related field\n5 years of professional experience in relevant field\nMinimum 2 years of hands-on experience with SOC Level 1 and Level 2 operations and Level 3 incident response\nProgramming skills in Python or Powershell\nDeep familiarity with Microsoft security products, including Microsoft Sentinel, Defender XDR components and KQL\nStrong understanding of Azure infrastructure, identity, and security architecture\nUnderstanding of security baselining, network hardening, and zero trust principles\nAbility to work in cross-functional DevSecOps environment\nFluency in English. Fluency in German or any other languages will be considered as an added value\nPreferred Qualifications:\nMicrosoft certifications in security technologies (e.g., SC-200, SC-300)\nExperience with agentic AI standards and responsible AI practices\nFamiliarity with governance models and risk assessment frameworks- Understanding of structured threat intelligence and enrichment workflows\n- Familiarity with MITRE ATT&CK mapping and detection coverage assessments\n- Familiarity with detection-as-code pipelines and version control systems\n- Familiarity with Web Application Firewall (WAF) principles and rule tuning","description_format":"text","description_chars":2493,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Orthopedic Clinics"],"lifecycle":[{"event":"open","at":"2026-10-20T16:29:43Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.804,"p_room":0.75,"age_days":28,"expected_fill_days":36,"reasons":["conf:9","velocity","win:late"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/-ao-foundation-senior-it-security-engineer","json_url":"https://alion.io/job/-ao-foundation-senior-it-security-engineer.json","meta":{"generated_at":"2026-10-22T06:56:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2191,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1850019},"rest":"https://alion.io/mcp/rest/get_company?id=1850019"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2F-ao-foundation-senior-it-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2F-ao-foundation-senior-it-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2F-ao-foundation-senior-it-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/-ao-foundation-senior-it-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2F-ao-foundation-senior-it-security-engineer"}]}