Join our Security Operations Center (SOC) Team, a team of four engineers within the Cybersecurity Department. You will work in a dynamic environment, gaining key skills in security automation and incident response while becoming familiar with the banking and finance threat landscape. Under the supervision of the Security Operation Manager, you will take part in the&nbsp;following projects:<ul><li>Connector Development: Developing Python-based connectors to integrate security tools (SIEMs, firewalls, EDR, IAM, threat intelligence platforms) with our SOAR platform using Python 3.9+, REST APIs, and standard protocols.</li><li>API Integration &amp; Data Normalization: Designing REST APIs and webhook handlers for bi-directional communication between systems. Transforming security data from heterogeneous sources into unified data models.</li><li>Technical Documentation: Writing clear technical documentation for integrations, deployment procedures, API specifications, and troubleshooting guides.</li><li>Collaboration: Working closely with the Playbook Engine Developer Intern to define standard connector interfaces and ensure seamless integration with automation workflows.</li></ul>&nbsp;<h2>Qualifications</h2><ul><li>Good proficiency in Python</li><li>Experience with async programming or concurrent execution</li><li>Basic understanding of REST APIs, HTTP protocols, and webhooks</li><li>Knowledge of JSON, YAML, and data serialization formats</li><li>Interest in cybersecurity and incident response</li><li>Experience with version control (Git)</li></ul> Nice-to-Have Skills<ul><li>Experience with SOAR platforms (Splunk SOAR, Cortex XSOAR, etc.)</li><li>Familiarity with security tools (Splunk, QRadar, Chronicle, CrowdStrike)</li><li>Knowledge of authentication protocols (OAuth, API keys, mTLS)</li></ul>

Switzerland

Finance & Banking

Building the bank of tomorrow takes more than skills.
We need to be ALL IN.
At Swissquote, It means combining our differences to imagine, discuss, code, develop, test, learn… and celebrate every step altogether.
Share our vibes? 
Join the Swiss Leader in online banking to unleash your potential.
www.swissquote.com/careers

WE ARE ALL IN 

Cybersecurity SOAR Integration Engineer – 6 Month Internship

Join our Security Operations Center (SOC) Team, a team of four engineers within the Cybersecurity Department. You will work in a dynamic environment, gaining key skills in security automation and incident response while becoming familiar with the banking and finance threat landscape. Under the supervision of the Security Operation Manager, you will take part in the&nbsp;following projects:<ul><li>Playbook Engine Development: Building and enhancing the core SOAR playbook execution engine using Python 3.9+. Implementing YAML parser, workflow executor, conditional logic evaluator, and decision tree engine.</li><li>Playbook Creation: Designing YAML-based SOAR playbooks for automated incident response. Creating workflows for phishing detection, malware analysis, ransomware response, threat intelligence enrichment, and IOC blocking.</li><li>Custom Utility Development: Developing Python utility functions and helpers to extend playbook capabilities. Building data transformation logic and security analysis functions. Execution Framework: Implementing error handling, logging, monitoring, performance optimization, parallel execution, and async operations.</li><li>Testing &amp; Quality Assurance: Writing unit tests and creating regression test suites. Testing playbooks with realistic security scenarios and validating end-to-end automation flows. Implementing and enforcing coding standards through linting tools.</li><li>Collaboration: Working closely with the Integration Intern to understand available connectors and ensure playbooks effectively utilize all integrations.</li></ul> <h2>Qualifications</h2><ul><li>Good proficiency in Python</li><li>Good knowledge of YAML syntax and workflow definition</li><li>Basic understanding of cybersecurity fundamentals and incident response</li><li>Interest in security operations and SOC processes</li><li>Familiarity with threat landscapes and security concepts</li><li>Basic experience writing tests or willingness to learn</li><li>Experience with version control (Git)</li></ul> <h2>Nice-to-Have Skills</h2><ul><li>Experience with SOAR platforms (Splunk SOAR, Cortex XSOAR, etc.)</li><li>Familiarity with security tools (Splunk, QRadar, Chronicle, CrowdStrike)</li><li>Experience with linting tools</li><li>Knowledge of workflow engines or orchestration systems</li></ul>

Cybersecurity SOAR Playbook Engine Developer – 6 Month Internship

English

Welcome to Swissquote, the Leader in the Online banking. As a fast pace growing company, we are always looking for new talents to join our diverse teams from Software Engineers to Data Scientists. Why not you?

We invite you to our live stream to celebrate the upcoming International Women's Day 2026 and meet our amazing team of Women in Tech.

We will be talking about:
- Our wild range of job opportunities from Junior to Senior
- Our career perspective at Swissquote with real Testimonials
- How our Women in Tech Community support each other

As we want to make this session to be as much interactive as possible, please feel free to post your questions.

Looking forward to see you there!

Business engineering

Business administration and economics

Computer science

Finance

Mathematics

Systems science

Bachelor

Master

Women in FinTech celebrating IWD2026 - #GiveToGain


Welcome to Swissquote, the Leader in the Online banking. As a fast pace growing company, we are always looking for new talents to join our team of 300 Software Engineers. Why not you?  

We invite you to assist to our Talk and meet our amazing Team of Women Software Engineers. 

We will talk about: 
     - Our wild range of job opportunities from Junior to Senior 
     - Our Career perspective at  Swissquote with real Testimonial 
     - Our Graduate Program: The Tech Talent Academy
     - Our fabulous Women in Tech Community
 
As we want to make this session to be as much interactive as possible, you can ask us your question. 

Looking forward to see you there! 




Swissquote

Create an account to receive personalised invitations to career live streams and job openings