Security Engineer - Platforms

Exeon is a Swiss cyber security company based in Zurich. Since 2016, we have been protecting critical infrastructures, financial institutions and enterprises whose operations fully rely on IT through AI-powered analysis of network communication. This makes the most sophisticated cyberattacks visible – attacks conventional tools fail to detect. We combine Swiss excellence with a flexible, remote-first, and collaborative culture, supporting passionate, ambitious professionals devoted to solving cybersecurity challenges and driving continuous innovation.

As a Security Engineer in our Solutions team, you will help design the components and data flow of our core products: how data gets in, how deployments are configured and operated, and how everything scales across very different customer environments, many of them on-prem and air-gapped. 

You’ll split your time between building (ingestion pipelines, automation, tooling) and deploying and operating (working with customers to get Exeon running reliably in their environments), so your work shapes both scalability and customer success.

In particular, you will:

• Build tooling and automation to simplify the deployment, configuration, and lifecycle management of Exeon.NDR, Exeon.UEBA, log collection and supporting components 

• Design, build, and maintain scalable log ingestion pipelines for a wide range of network and application log sources and formats, including parsing, normalization, and validation 

• Deploy and operate Exeon in customer environments (on-prem, private cloud, and hybrid), including sizing, performance tuning, and troubleshooting complex issues 

• Work with customers to understand their data sources, infrastructure constraints, and security needs, and translate these into clear requirements for product and engineering teams 

• Contribute to customer support, documentation, and runbooks alongside your Solutions colleagues

What you can expect from us:

Exeon offers an open company culture that values and encourages diversity, teamwork and a growth mindset. Our goal is to provide our employees with an exciting, supportive and motivating environment for personal growth and career development while ensuring that our team maintains a healthy work-life balance. We strive to achieve this by offering:

• An exciting and impactful job in a fast-growing Swiss cyber tech company expanding across Europe with manifold opportunities to shape your professional profile.

• Working in close collaboration with our interdisciplinary team and learning from our Security Experts, Data Scientists, and Business Professionals.

• Taking over responsibilities quickly and help shape and promote a cutting-edge security software.

• A high degree of trust, independence and flexibility, also in terms of working hours and place of work (remote or in the office).

• A competitive salary and appealing benefits package.

What you bring along:

We are looking for a proactive, self-motivated and enthusiastic cyber security professional who is comfortable in a high-paced start-up environment and who shares our values. You should be confident with solving problems independently and communicating easily with both internal teams and directly with customers. You should also:

• 3-5 years of experience in systems engineering, data engineering, platform/infrastructure engineering, or a similar role 

• Working knowledge of network and application security and the telemetry relevant to detection 

• UNIX/Linux experience, including networking, troubleshooting, and performance tuning in containerized deployments (Docker and/or Kubernetes) 

• Strong programming skills in Python and Bash (or comparable languages), with a focus on automation and maintainable, production-quality code 

• Hands-on experience designing and operating data ingestion pipelines (e.g. syslog, Logstash/Fluentd/Vector, Elastic stack, or similar), including handling heterogeneous formats and high volumes 

• Comfortable with working in a largely remote team where clear communication is key to successful collaboration and impact. We are an English-speaking team but German fluency is appreciated when communicating to some customers 

• Degree in Computer Science, Electrical Engineering, or equivalent practical experience

Nice to have:

• Solid understanding of network and application security fundamentals, common attack patterns, and the log and telemetry sources that matter for detection 

• Experience with SIEM, SOAR, or detection platforms (e.g. Splunk, Sentinel, Elastic Security), or as a detection engineer or security analyst 

• Familiarity with network telemetry such as NetFlow/IPFIX, Zeek, or Suricata, and frameworks like MITRE ATT&CK 

• Prior customer-facing or professional services experience.