Your Responsibilities

Excellent research needs state-of-the-art IT infrastructure and innovative digital services. With a team of about 50 experts, we will redesign ISTA’s digital landscape over the next few years and implement an ambitious digital transformation programme to facilitate the Institute’s rapid growth. As part of our strategy, we are planning to introduce an information security management system based on ISO 27001, establish a zero-trust architecture, and implement state-of-the-art security measures across digital services.
As a cybersecurity engineer, you are reporting to our CISO, work closely with our IT & Digital Transformation team, and play a key role in protecting our scientific and administrative data, digital services, and IT infrastructure from cyberattacks. Developing and maintaining a comprehensive cybersecurity architecture and best practices are additional responsibilities of this position.

• Design, implement, and maintain security solutions
• Continuously monitor network and system activity to detect, analyse, and respond to security incidents and breaches
• Conduct vulnerability assessments and penetration testing, and coordinate remediation measures
• Collaborate with IT teams and researchers to ensure secure configuration and operation of systems and applications
• Develop and maintain security policies, procedures, and documentation in compliance with industry standards

Your Profile

• Degree in Computer Science, IT Security, or a related technical field, or equivalent professional experience
• Solid experience with cybersecurity tools and platforms (e.g., CrowdStrike, Cloudflare, Microsoft Defender, SIEM solutions)
• Strong understanding of network security, operating system hardening, and encryption technologies
• Practical experience in incident response, threat analysis, and remediation workflows
• Good working knowledge of IT security standards and frameworks such as ISO 27001 or NIST, and ITIL security practices
• Proactive mindset, analytical thinking, and commitment to continuous learning in the evolving security landscape
• Ability to communicate technical information clearly to non-technical stakeholders
• Working language is English, good working knowledge in German is an advantage