Senior Security Analyst; Automation & Detection

At On, our technology moves as fast as our runners: always evolving, always pushing boundaries. We're building a world-class platform to ignite the human spirit through movement, and our Information Security team is the trusted guardian of that mission.

Join a collaborative team of curious minds who view security not as a blocker, but as an accelerator. We are explorers in a dynamic landscape, constantly venturing into new territories of technology and threat defense. We are looking for a Senior Security Analyst who shares this passion—someone who wants to move beyond the conventional SOC and help build the future of security operations at On.

As a senior member of our security operations team, this is a deeply hands-on role where you will act as a strategic defender at the heart of our ecosystem. Your mission is to tackle expert-level (L3) challenges, from in-the-weeds incident response and proactive threat hunting to engineering robust detection capabilities. You'll not only solve the most complex security incidents yourself but also use your findings to build a more resilient environment for tomorrow.

• Lead the hands-on investigation of critical security incidents, conducting deep-dive technical analysis and coordinating remediation with our engineering teams
• Serve as a senior escalation point during an on-call rotation, ensuring a rapid and effective response to critical security incidents outside of working hours
• Master our primary security tool, Google Sec Ops (Chronicle), by personally developing sophisticated detection rules and optimizing our security event pipeline
• Proactively hunt for hidden threats within our fast-paced Cloud environment, getting your hands dirty with data to turn hypotheses into actionable intelligence
• Shape our security strategy by contributing to threat modelling, vendor risk assessments, and the continuous evolution of our detection and response program
• Mentor team members and act as a subject matter expert, sharing your practical knowledge and elevating the capabilities of the entire security function

You are an experienced security professional with a passion for technical details and a proactive, problem-solving mindset. Your background demonstrates a commitment to excellence in security operations.

• You bring 5+ years of experience in a hands-on security operations or incident response role, with a proven focus on L3 analysis
• You possess strong proficiency with SIEM platforms, specifically Google Sec Ops (Chronicle), including building custom detection rules
• You are comfortable and familiar with navigating and securing cloud environments, ideally Google Cloud (GCP)
• You have a proactive and inquisitive mindset, with demonstrable experience in threat hunting techniques and familiarity with frameworks like MITRE ATT&CK
• You are a natural collaborator with the ability to communicate complex technical issues to both technical and non-technical stakeholders

We are a globally-distributed team within the broader Technology function, organized into five core domains:
Cyber Defence, Security Engineering, Security Architecture, IT GRC, and Endpoint Security.

Just by the banks of the Limmat you’ll find our largest global hub in Zürich West – On Labs – where you can hike up 12 floors through our custom-built spiral trail.

On is a place that is centered around growth and progress. We offer an environment designed to give people the tools to develop holistically – to stay active, to learn, explore and innovate. Our distinctive approach combines a supportive, team-oriented atmosphere, with access to personal self-care for both physical and mental well-being, so each person is led by purpose.

On is an Equal Opportunity Employer. We are committed to creating a work environment that is fair and inclusive, where all decisions related to recruitment, advancement, and retention are free of discrimination.

We want to set everyone up for success, so here’s the lowdown on how we hire. Our process is a two-way street – bringing you into our culture, while helping us learn how you think.

Our full process can last about…