At Alpiq, we are currently looking for a proactive and experienced Senior Application, Offensive and Security Awareness Specialist to lead and implement our Infrastructure and Software Security Testing capabilities. In this role, you will drive and develop all security awareness initiatives across the organization, while also playing a key role in supporting the adoption of AI technologies within Alpiq.

Location: Olten or Lausanne (Switzerland) or Prague (Czech Republic)

Your main responsibilities

• Identify potential cyber risks in newly adopted applications and execute internal security testing on new applications and functionalities
• Collaborate with development teams to ensure secure software design and provide guidance on the configuration of application security tools (e.g. SAST)
• Lead remediation efforts for identified vulnerabilities and develop the Application Security service offering for the entire organization
• Identify and operate tools for security testing automation and collaborate with the Security Operations Center (SOC) for Purple Team Operations
• Conduct internal penetration testing and participate in the review of the external Penetration Tests findings and the remediation efforts
• Plan and execute phishing simulations and security awareness trainings, designing tailored initiatives for specific user groups
• Assess the security of AI applications and contribute to the development of a robust AI security framework through testing and design of technical controls

Your profile

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field
• 5+ years of experience in cybersecurity, with a focus on application and/or offensive security and penetration testing
• Strong knowledge of OWASP Top 10, MITRE ATT&CK, and secure development practices
• Proficiency in one or more programming languages (Python highly desirable)
• Relevant certifications such as OSCP, GWAPT, CEH, or CSSLP are a strong advantage
• Fluency in English required; other languages are a plus
• Preferred skills: experience with AI security testing; familiarity with CI/CD pipelines and CloudOps tools (e.g. Terraform); understanding of OT security