Senior Security Engineer

We are seeking a Senior Vulnerability Management Engineer to lead and enhance our vulnerability detection and remediation capabilities across on-prem and cloud environments. This role is highly technical and sits at the core of our cyber defense function ensuring full alignment with FINMA DORA and MAS requirements in this key area of cyber risk. 

You will serve as our technical authority for Tenable instances on prem and cloud and drive engineering improvements integration with ITSM system and regulatory-grade reporting. 

Your Key Tasks 

• Lead engineering architecture and advanced configuration of  / / Nessus across hybrid infrastructures. 
• Oversee authenticated scanning across servers cloud workloads network appliances databases and container platforms. 
• Integrate Tenable with enterprise systems (CMDB SIEM ITSM) using APIs and scripting (Python/PowerShell). 
• Engineer cloud vulnerability coverage via connectors agents and container registry scans. 
• Enhance detection accuracy through custom plugins scan policy tuning and automation pipelines. 
• Provide technical leadership and guidance to remediation teams ensuring adherence to CIS/NIST/SWIFT/ISO standards. 
• Produce regulator-ready metrics dashboards and audit evidence for FINMA and MAS reviews. 
• Contribute to security architecture hardening initiatives and continuous improvement of the vulnerability management program. 

Qualifications :

• Extensive hands-on experience with Tenable ( Nessus Manager). 
• Deep technical expertise in vulnerability detection authenticated scan engineering and hybrid infrastructure scanning. 
• Strong knowledge of networks Windows/Linux VMware cloud platforms (AWS and OCI) and container ecosystems. 
• Scripting and automation skills (Python PowerShell REST APIs). 
• Solid understanding of security frameworks: CIS Benchmarks ISO 27001 SWIFT CSCF CSA CCM. 
• Experience in FINMA MAS and DORA regulated financial environments (banks insurers securities firms). 
• Ability to communicate technical risk clearly to both engineers and senior management. 
• Certifications: OCI Security Professional Tenable Certified Engineer CISSP 
• Exposure to Kubernetes Terraform/Ansible CI/CD pipelines and automated hardening tools. 
• Experience leading vulnerability engineering. 

Additional Information :

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. 

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. 

We hire compensate and promote regardless of origin age gender identity sexual orientation or any other fantastic traits that make us all unique we have done our best to write this advert in an inclusive and neutral way. 

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies and any unsolicited candidate submissions will be exempt from any payment expectations.  

#LI-Hybrid

Remote Work :

No

Employment Type :

Full-time