Team Lead, Web Entry Solutions

Tasks

As Team Lead for Web Entry Solutions, you will be responsible for the strategic and operational management of our central web entry security infrastructure and its ongoing development. Your responsibilities will include:

• Stable operation and strategic development of core IT security infrastructures in the web entry sector
• Design, implementation, and continuous optimization of web application firewall and API security architectures
• Operation, configuration, and further development of security features such as ModSecurity and Core Rule Sets (CRS)
• Design, implementation, and operation of Global Single Sign-On (GSSO) solutions based on SAML 2.0 and OpenID Connect (OIDC)
• Comprehensive protection against all OWASP Top 10 vulnerability categories at the infrastructure and application levels
• Operation and Further Development of Load Balancing Solutions and Multi-Layered DDoS Protection Mechanisms
• Monitoring and analysis of HTTP(S) traffic for anomalies, attack patterns, and policy violations

Security Governance, Assessments & Projects

Your responsibilities will also include:

• Security Assessments, Vulnerability Management, and Baseline Compliance on Web Entry Platforms
• Analysis and prioritization of findings from penetration tests, DAST scans, and bug bounty programs
• Management and implementation of complex security projects with a strategic view of the overall IT security landscape
• Analysis and management of security incidents and coordination of response measures
• Development and maintenance of security policies, WAF guidelines, technical documentation, and operating instructions

Guided Tours & Consultations

As a Team Lead, you will also take on leadership and advisory responsibilities:

• Leading and advising a globally distributed team in Switzerland and Singapore

Requirements

The following requirements apply to this position:

• A university degree (BSc/MSc/ETH) or higher technical qualification (HFF-FH) in computer science, information security, or a comparable technical discipline
• In-depth, verifiable knowledge of the OWASP Top 10 vulnerability categories
• Extensive hands-on experience in configuring, operating, and optimizing ModSecurity
• Solid understanding of web application architectures and security protocols
• Demonstrable practical experience with identity and access management solutions
• Experience in handling penetration test results and security-focused code reviews
• Fluent English (written and spoken, C1/CEFR level)

Nice to have

The following skills and experience are a plus:

• Experience in the financial sector, in regulated environments, or in audit-intensive contexts
• Recognized security certifications (CISSP, CISM, CCSP, AZ-500, SC-100, or GWAPT)
• Knowledge of the Secure Software Development Lifecycle (SSDLC) and DevSec