Security Consultant

WHO WE ARE?

Being the daughter company of Swisscom - leading telecommunications company and one of the most sustainable and innovative companies in Switzerland - we share the same values, vision and goals.

As a trustworthy and efficient Swisscom IT service partner, we create valuable customer experiences. We work in a strong collaboration with our Partners in Switzerland and attract and retain high performers.

We're expanding our footprint in Riga and actively seeking 50+ DevOps Engineers to join our growing teams within this year.

We invite driven professionals to join us, grow with us, and help shape the future.

As a Security Consultant, you will provide security consulting and coaching services to teams across the Swisscom IT organization. You will work closely with application and platform teams to assess risks, define security measures, and strengthen security practices.

Your responsibilities will include conducting threat modeling sessions, reviewing security architectures, and producing a high-quality knowledge base of the ICT landscape. In addition, you will support the Software Development Center (SDC) in maintaining and evolving its Information Security Management System (ISMS) in alignment with industry best practices and internal standards.

The role combines hands-on technical security expertise with advisory and coordination activities, including collaboration with risk managers and senior stakeholders.

Key Responsibilities

• Partner with engineering and application teams to improve security posture across cloud-native environments

• Conduct threat modeling workshops and security architecture reviews

• Support teams with secure design and implementation practices

• Integrate and optimize security practices within development and CI/CD workflows

• Contribute to security process improvements, including risk management and compliance-related activities

• Support the SDC ISMS through advisory, coordination, and operational assistance activities

• Assist with risk assessments, control implementation, audit preparation, and security documentation updates

• Collaborate with risk managers and senior stakeholders on security and compliance initiatives

• Assess and recommend cloud-native security controls and technologies

• Support hardening, monitoring, and governance initiatives for Kubernetes and container platforms

What we offer:

• Salary from 2400 to 4000 EUR monthly gross

• 80 EUR monthly cell phone and internet allowance

• Flexible schedule and possibility to work in hybrid mode

• Ergonomic home office allowance in value of 500 EUR

• Possibility to work abroad for 4 weeks each year

• Health Insurance – includes gym or pool/aquatic fitness membership, issued after 1 month, and covers consultations with a psychologist or psychotherapist

• Optics (200 EUR every 2 years)

• 24 working days of annual paid holiday per year

• 5 dedicated paid learning day’s annually

• Gym membership or swimming pool/water aerobics membership

• Day off on your birthday or names day

• 1 day off for social activities (voluntary project, adopting an animal)​

• Collaborative, friendly and driven work environment

• Work on innovations, cutting edge technologies and in autonomous high performance teams

• Parking options

• Continuous development environment that fosters your growth (conferences, cross-department experience sharing, learning platforms etc.)

• Annual salary review

• Experience in security auditing and security assessments

• Strong understanding of application and infrastructure security

• Ability to assess and review application and cloud security architectures

• Knowledge of cloud-native security practices, especially Kubernetes and container security

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Information Management, or a related field

• Excellent written and spoken English skills

Nice to Have

• Experience with hardening, monitoring, and policy enforcement tools such as Open Policy Agent (OPA) and Cloud Security Posture Management (CSPM) solutions

• Relevant security certifications such as CISSP, CCSP, or equivalent

Personal Attributes

• Self-motivated, flexible, and reliable professional who performs well in complex environments

• Strong sense of personal and professional integrity

• Results-oriented mindset with the ability to drive initiatives through to completion

• Comfortable handling challenging situations and adapting to changing priorities

• Strong collaboration and communication skills across technical and non-technical stakeholders