Cyber Defense Analyst (L2/L3)

About the role

Help AG is seeking a motivated Cyber Defense Analyst (L2/L3) to join its Cybersecurity Operations Center (CSOC) within the Managed Security Services business unit. You will monitor client environments, lead fellow analysts, and conduct forensic analysis and threat hunting to detect and respond to security incidents.

Key responsibilities

• Monitor security technologies such as IDS/IPS, firewalls, switches, VPNs and other threat data sources.
• Correlate and analyze events using SIEM tools to identify incidents.
• Develop, follow and present operational processes for incident analysis, escalation and remediation.
• Respond to inbound technical requests and support cases within documented SLAs.
• Document actions, create customer reports, and communicate findings internally and to clients.
• Maintain up‑to‑date knowledge of the threat landscape and share intelligence across the analyst team.
• Lead knowledge‑sharing activities, write technical articles, and train analysts on SIEM usage.
• Perform forensic log analysis, threat‑intelligence reporting, and on‑site client engagements as needed.

Required profile

• 2‑5 years of experience in cybersecurity operations, intrusion detection, incident handling, log analysis, threat hunting or digital forensics.
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, Electrical Engineering or a related field.
• Strong interest and passion for cybersecurity, network and system security.
• Solid understanding of IT security best practices, common attack types and detection/prevention methods.
• Proven ability to analyze and interpret system, security and application logs.

Required skills

• IDS/IPS
• Firewalls
• Network switches and VPNs
• SIEM platforms
• Log analysis
• Forensic analysis
• Threat hunting
• Incident response
• Threat intelligence reporting
• Use‑case and query development