Security Analyst, Proton
€38-62k
+ Stock Options
Encrypted email, drive, and VPN services
Open for applications
Encrypted email, drive, and VPN services
501-1000 employees
Open for applications
€38-62k
+ Stock Options
501-1000 employees
Company mission
To fight for a better internet that is secure and private by default.
Role
Who you are
- Good logical reasoning, structure, and problem-solving skills. The ability to correlate diverse data sources, extract hidden patterns from massive volumes of data, and think like an attacker
- Solid understanding of system and network security best practices, including network ACLs, authentication mechanisms, and endpoint defense configurations
- Strong working knowledge of Linux-based operating systems, their architectural security components, system calls, and mechanisms like SELinux
- Familiarity with modern malware techniques, attacker tactics (TTPs), and how to translate this threat intelligence directly into actionable SIEM rulesets
- Sound understanding of networking protocols, web technologies, and detection mechanics (eg. EDR, IDS/IPS)
- Intermediate-to-advanced proficiency in Python (or similar languages) for scripting, parsing, and automation tasks
- Excellent written and spoken English, paired with strong communication and organizational skills to collaborate smoothly across different teams
- A deep belief in digital privacy
- Proven experience (ideally 3-4 years) in a cybersecurity or operations context
- Hands-on experience working with Elastic stack, Vector, or other tools used in large-scale log analysis
- Experience utilizing data analysis tools (such as Jupyter, Pandas) to hunt for anomalies
- Practical knowledge of securing and analyzing containerized workloads (Docker, Kubernetes) and Cloud infrastructure environments
- Experience in leveraging and integrating Threat Intelligence into security workflows
- An industry-recognized security certification is considered a strong asset
What the job involves
- The Security Analyst will be at the frontline of protecting Proton’s global infrastructure
- This role combines analytical threat investigation with practical security engineering, taking a role in running, tuning, and evolving our detection capabilities
- You will bridge the gap between day-to-day security monitoring and proactive threat defense
- Sitting within our security team, you will not only respond to alerts and manage incidents but actively design the rules, playbooks, and systems that catch attackers before they succeed
- We value deep logical reasoning, data-driven intuition, and strong cross-functional communication
- Threat Detection & SIEM Engineering:
- Maintain, optimize, and enhance our core security monitoring toolkit (SIEM, sensors, etc.)
- Design, build, and continuously refine meaningful alerts, transforming raw infrastructure events into high-fidelity detections
- Proactively identify malicious activities or blind spots within our network and infrastructure that our current toolsets might not cover
- Incident Response & Monitoring:
- Monitor, triage, and deeply investigate security alerts covering all of Proton’s corporate infrastructure
- Own the containment and mitigation of potential security incidents, orchestrating quick and effective response actions
- Develop, document, and test rigorous incident response plans and actionable playbooks to streamline future workflows
- Risk Mitigation & System Security:
- Analyze complex logs, endpoints, and network traffic to isolate anomalies, extract patterns, and identify emerging risks
- Collaborate with engineering teams to deploy and maintain secure architectures, applying server and system security best practices (e.g., OS hardening, strict access controls)
- Contribute to continuous posture improvement by feeding operational findings back into security tooling and roadmaps
- Governance:
- Support, advise, and guide the wider company on all security-related matters and emerging risks
- Participate in business process documentation, operational metric reporting, and the strategic automation of security tasks
- Promote a culture of strong IT security awareness and responsible user behavior across our distributed teams
- Success in This Role:
- The SIEM environment is highly tuned, resulting in a demonstrable reduction in false positives and a significant increase in high-value, actionable alerts
- Security incidents are quickly contained, thoroughly investigated, and translated into resilient long-term containment strategies and playbooks
- Threat detection coverage expands smoothly to secure new infrastructure, products, and cloud microservices
Our take
Proton is a Geneva-based startup founded by former CERN worker and internet privacy advocate Andy Yen. It provides internet users with encrypted webmail, calendar, drive, and VPN services.
Proton maintains its pro-privacy ethos using a Swiss VPN, protected by strict Swiss privacy laws. In essence, it has established a connection between the personal and the political, smartly utilising the country’s national laws to benefit people and organisations globally. Proton also funds charities and movements such as the World Wide Web Foundation and Netblocks, further cementing it as an influential NGO.
Perhaps Proton’s most important quality is its determination to maintain independence from advertisers and companies. Originally founded on donations, Proton has funded itself via grants rather than venture capital so that all of its customer's data is never at risk of being mined. One effect of this is that to keep up with the increasing competition in the data privacy sector, Proton has expanded its services to allow more cross-selling and simultaneously has more products to offer, such as drive and calendar privacy.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Company benefits
- These vary by location and type of contract but expect support on your vacation, parental leave, refreshment if working from the office, learning and development opportunities, equity for shared success, flexible working hours and remote work, company events, and team-building activities.
Company HQ
Plan-les-Ouates, GE
Leadership
Andy Yen
(Founder & CEO)Previously PhD Researcher at CERN
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 44 more jobs at Proton