Security jobs in Geneva

Identity & Access Management Engineer

Who is Sonar? Sonar enables organizations to ship agentic code with confidence. Code creation is abundant, but confidence is scarce. Our core platform, SonarQube, verifies over 750 billion lines of code every day, delivering agentic verification and governance for all code. Trusted by more than 7 million developers and 75% of the Fortune 100, including teams at Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company, Sonar enables organizations to reduce outages, improve security, and lower the cost and risk of agentic software development.Founded in Geneva and now headquartered in Austin, Texas, Sonar has a global team working across offices and hubs, including Silicon Valley, London, Bochum, Barcelona, Singapore, Tokyo, and the Washington, D.C. area. At Sonar, we’re enabling enterprises to build agentic software factories that can move quickly while maintaining the control, consistency and evidence required to ship with confidence. Position description We are looking for an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access. You will work with security, IT, engineering, and compliance teams to deliver a secure, scalable, and user-friendly access experience aligned with Zero Trust principles. What you will do Design, implement, and maintain enterprise IAM solutions, including SSO, MFA, federation, and directory services. Architect and manage identity lifecycle processes (joiner/mover/leaver), automating provisioning and deprovisioning across SaaS, cloud, and on-prem systems. Implement and operate Privileged Access Management (PAM), including vaulting, session management, and just-in-time access. Lead Identity Governance and Administration (IGA) initiatives such as access reviews, certifications, role-based access control (RBAC), and segregation-of-duties controls. Integrate applications with the identity platform using SAML, OIDC, OAuth 2.0, SCIM, and LDAP. Develop automation and tooling (APIs, scripts, CI/CD pipelines, Infrastructure as Code) to reduce manual identity operations. Secure cloud identity and access across AWS, Azure, and/or GCP, including IAM policies, workload identity, and service accounts. Define and enforce authentication and authorization standards, policies, and best practices. Monitor identity-related threats and support detection and response for account compromise, credential abuse, and privilege escalation. Experience and qualifications 6 to 15 years of experience in IAM, security engineering, or a related field. Hands-on experience with at least one major IAM platform such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, SailPoint, or CyberArk. Strong knowledge of identity protocols and standards: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos. Experience with Active Directory and directory services architecture. Proficiency in at least one scripting or programming language (Python, PowerShell, Go, Java, or JavaScript). Solid understanding of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM). Experience with MFA, passwordless, and conditional or risk-based access. Familiarity with Zero Trust, least privilege, and defense-in-depth principles. Strong analytical, problem-solving, and communication skills. Additional comments This role is based in Geneva. We are unable to consider candidates unwilling to be in Geneva, but we are willing to relocate the right candidate. We value diversity, equity, and inclusion At Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you need any accommodation, please reach out to us at hiring@sonarsource.com.  All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.  Applications that are submitted through agencies or third party recruiters will not be considered.

Application Security Engineer

Who is Sonar? Sonar is driving the future of agent-centric software development. As the leader in AI code review and verification, we solve a critical problem: ensuring that software generated by AI-assisted developers or autonomous agents is reliable, secure, and maintainable. Integrating seamlessly with Claude Code, Codex, Cursor, GitHub Copilot, Gemini, and Devin, we help over 75% of the Fortune 100 build trusted, reliable, compliant software. Customers who use Sonar are 44% less likely to report an outage due to AI-generated code. We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC). Industry giants like Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company.count on us to provide independent, explainable, consistent review and governance of their AI-generated code via products like: SonarQube: The world’s leading AI code review and verification platform. SonarQube Foundation Agent: Currently topping the leaderboards for agentic software repair. SonarSweep & Sonar Context Augmentation: Providing the enterprise-grade context and constraints agents need to be truly effective. Our team operates across global hubs in Austin, Bochum, Dubai, Geneva, London, Singapore, Tokyo, and Washington D.C. We move with a mindset we call CODE: Committed to our customers and community. Obsessed with quality. Deliberate in our decisions. Effective as one team. With over $400M in revenue and profitable, fast-paced growth, we are building the backbone of the AI software revolution. If you’re hungry to have an impact, want to build at a fast pace, and ready to work at the forefront of AI, we want to hear from you. Position description   The primary goal of the Information Security team is to earn deep trust with our rapidly growing customer base by relentlessly safeguarding Sonar products and the supporting cloud platforms, while consistently demonstrating that Sonar meets demanding, industry‑leading security standards. You will champion security by design, partnering with product, platform, and infrastructure engineering teams so that our products and cloud platforms are imagined, built, and operated to Sonar’s high security bar. What you will do Shape secure products and cloud architecture Partner with product and engineering teams from the earliest design stages to build secure, resilient solutions by design. Review product architectures and AWS environments, ensuring security requirements meaningfully inform technical decisions and final designs. Lead security assurance and improvement Deliver high-impact initiatives from the strategic security plan, from evaluating new approaches to deploying modern security tools and capabilities across the organization. Plan and manage independent security assessments, penetration tests, and red-team exercises; translate findings into practical improvements and customer-facing trust artifacts. Investigate complex product and internal security findings, identify root causes, and help teams implement durable remediation. Strengthen customer trust and incident readiness Lead the investigation and resolution of customer security concerns with rigor and empathy, using each engagement to reinforce confidence in our security program. Serve as a security subject-matter expert during incidents, helping teams understand, contain, and learn from emerging threats. Occasional on-call participation may be required. Anticipate threats and scale the security program Monitor and interpret threat intelligence, turning changes in the threat landscape into prioritized risks and actionable recommendations. Continuously improve and automate security processes, increasing the quality, speed, and visibility of information that informs the security strategy. Experience and qualifications Secure product and cloud architecture Extensive experience with application and cloud architectures, predominantly AWS, and a strong interest in how modern cloud patterns can strengthen or weaken security. Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs. Experience assessing and securing AI and agentic AI capabilities, with the curiosity to experiment, learn, and help define emerging best practices. Experience applying threat-modeling approaches, such as STRIDE, to improve design discussions and identify risks early. Security assurance and remediation Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most. Experience investigating and managing vulnerabilities, from triage and prioritization through to remediation and organizational learning. Threat awareness and security automation Practical experience using AI to automate repeatable security work, along with enthusiasm for building small tools and experiments that make security teams faster and more effective. Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves. Additional commentsThis role is based in Geneva, Switzerland. We are unable to consider candidates unwilling to be in Geneva, but we are willing to relocate the right candidate. We value diversity, equity, and inclusionAt Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you need any accommodation, please reach out to us at hiring@sonarsource.com.  All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.  Applications that are submitted through agencies or third party recruiters will not be considered.

Staff Software Engineer (Java) - Identity

Who is Sonar? Sonar enables organizations to ship agentic code with confidence. Code creation is abundant, but confidence is scarce. Our core platform, SonarQube, verifies over 750 billion lines of code every day, delivering agentic verification and governance for all code. Trusted by more than 7 million developers and 75% of the Fortune 100, including teams at Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company, Sonar enables organizations to reduce outages, improve security, and lower the cost and risk of agentic software development.Founded in Geneva and now headquartered in Austin, Texas, Sonar has a global team working across offices and hubs, including Silicon Valley, London, Bochum, Barcelona, Singapore, Tokyo, and the Washington, D.C. area. At Sonar, we’re enabling enterprises to build agentic software factories that can move quickly while maintaining the control, consistency and evidence required to ship with confidence.  Position descriptionWe are looking for a highly impactful Staff Engineer to join the Identity Squad within our StoreFront department.   The Identity squad is the cornerstone of trust and access across Sonar's product ecosystem. The squad is responsible for everything related to authentication (AuthN) and authorization (AuthZ) for all of Sonar’s products. We operate services at scale, handling 1000s of requests per second. As a Staff Engineer, you will be architecting robust, scalable, and highly secure identity solutions that seamlessly bridge our cloud and self-managed offerings. As a Staff engineer you will also play a crucial role in mentoring other engineers, helping them grow their skills and expand their impact.   You will partner closely with Product Managers, Engineering Managers, and other Staff/Principal Engineers across the organization to lead the end-to-end delivery of critical identity features. You will take ownership—from initial architecture and design through to implementation and deployment—of major initiatives ensuring a frictionless yet highly secure experience for millions of developers. What you will do Collaborate with UX designers, Product Management, and engineering teams to deliver robust security features alongside an optimal user experience. Take strong ownership of squad deliverables and effectively drive sprints toward successful completion. Architect and guide the design of our on-premises and AWS cloud applications. Oversee feature deployment, production monitoring, and troubleshoot team-specific live issues. Mentor engineering team members to help them grow in their technical responsibilities and remove blockers to their autonomy. Contribute to the definition of the team’s short and long-term goals. Experience and qualifications Over 8 years of software engineering experience, including working as a Tech Lead, Staff Engineer, or Software Architect. Proven ability to take initiative and bring a subject involving several stakeholders and engineers to completion with little to no supervision.  Experience supporting and mentoring other team members. Proficiency with Java coupled with a strong passion for Clean Code and rigorous software quality standards. Experience architecting cloud-native applications. Experience with relational RDBMS (such as Postgres) and SQL. Domain expertise in Identity and Access Management (IAM), including hands-on experience with AuthN/AuthZ protocols (OAuth2, OIDC, SAML, JWT) and user provisioning (SCIM). Proficiency in working with and steering AI coding tools (Codex, Claude, etc). In-office culture We're intentional about this. We believe the best teams are built in the room together. Three anchor days — Mondays, Tuesdays, and Thursdays — create the collaboration rhythm that makes a hub office worth having.  Candidates need to be genuinely based in the location the role is posted  — if that's not where you are today, we're happy to support relocation for the right person.   We value diversity, equity, and inclusion At Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you need any accommodation, please reach out to us at hiring@sonarsource.com.  All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.  Applications that are submitted through agencies or third party recruiters will not be considered.

Endpoint Security Engineer

Job DescriptionVitol is seeking an Endpoint Security Engineer to join its Technology department. The role is  accountable for protecting Vitol's Endpoints (Desktops, Laptops, VDIs, Mobiles & Tablets) and  the Microsoft 365 workplace around them, across our worldwide operations.  The Endpoint Security Engineer will engineer and run endpoint protection with products such as  CrowdStrike, Palo Alto, Tanium, and device management and compliance with  Intune/AirWatch/Workspace One, and Microsoft 365 Security.  The role also plays a central part in Vitol's transformation and adoption of cloud-native device  management such as Microsoft Intune & Workspace One  The Endpoint Security Engineer will work closely with the CISO organization, the local IT Support  & infrastructure teams, and the Cloud & Network teams.  Key areas of responsibility for the Endpoint Security Engineer include:  • Endpoint Protection: Deploy, configure, and maintain Vitol’s security stack across the  estate, covering sensor rollout and health, prevention and detection policies, exclusions,  device control, and related settings.  • Hardening & Patching: Maintain hardening baselines, disk encryption, patching, and  vulnerability remediation across Windows, macOS, and mobile devices. Ensure Attack  surface reduction rules are applied across all devices.  • Device Management: Engineer Intune for security, including compliance policies,  configuration profiles, security baselines, app protection, and modern device provisioning.  • Intune Migration: Contribute to the rollout of Intune, making sure security controls carry over  and improved, insuring configuration-as-code for Intune & conditional access  • Identity & Access: Ensure Entra ID controls defined by the IAM team are well implemented  and that tie access to device and identity health, including Conditional Access, device  compliance, and multi-factor authentication.  • Microsoft 365 Security: Apply Microsoft 365 security and compliance controls relevant to  endpoints, such as data loss prevention and information protection.  • Integration: Integrate EDR and EPP systems with Intune and Entra ID so that device risk  informs access decisions.  • Monitoring & Reporting: Monitor endpoint security posture, and incidents with security  operations, drive remediation to closure, and assess exposure to new threats.  • Automation: Automate deployment, compliance checks, and reporting with PowerShell and  the Microsoft Graph API.  • Standards & Compliance: Maintain endpoint security standards, operating procedures, and  documentation, and support audits aligned with ISO 27001, NIST, and CIS.  • DLP: Working in close collaboration with Cyber Security & Assurance to ensure proper  deployment of DLP rules and sensitivity labels across devices.  Qualifications• Education: Undergraduate or postgraduate degree in a technical discipline (Computer  Science, Engineering, Information Security, or a related field), or equivalent experience.  • Endpoint Security Experience: 5+ years of experience engineering endpoint security in an  enterprise environment.  • EDR/EPP: Strong hands-on experience, covering deployment, policy design, tuning, and  investigation with main EDR tools in the market such as CrowdStrike, Palo Alto, M365  Security  • Microsoft Intune: Strong hands-on experience across Windows, macOS, iOS, and Android.  • Entra ID: Solid knowledge of Entra ID, including Conditional Access, device identity, and  multi-factor authentication.  • Microsoft 365/DLP: Very good knowledge of Microsoft 365 security and compliance  capabilities, Microsoft Pureview for retention policies and DLP.  • Hardening & Vulnerability Management: Strong grasp of endpoint hardening, encryption,  patching, and vulnerability management.  • Scripting & Automation: Experience with PowerShell and the Microsoft Graph API.  • Frameworks: Working knowledge of the CIS, NIST, and ISO 27001 frameworks.  • SCCM & Intune: Experience with SCCM / Configuration Manager, and with migrating from it  to Intune, is an advantage.  • Certifications: Microsoft MD-102, SC-200, or SC-300, or CrowdStrike Certified Falcon  Administrator (CCFA) or Responder (CCFR), CISSP/ISSEP is an advantage  • Industry: Familiarity with commodity trading or financial services technology environments is  an advantage.  • Languages: Fluent English/French  Additional Information• Analytical & Improvement-Minded: Brings an analytical mindset and a focus on continuous  improvement.  • Clear Communicator: Explains security decisions to both technical teams and end users,  and documents them well. • Stakeholder Management: Balances security with a smooth working experience for traders  and employees.  • Highly Collaborative: Works well with helpdesk, infrastructure, and security colleagues, and  shares knowledge freely.  • Pragmatic & Outcome-Oriented: Prioritizes by risk and sees remediation through to  closure.  • Decisive & Action-Oriented: Comfortable setting priorities and delivering at pace in a flat,  high-ownership culture.  Company DescriptionVitol is a leader in the energy sector with a presence across the spectrum: from oil through to power, renewables and carbon.  From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over $2 billion of capital to renewable projects, and are identifying and developing low-carbon opportunities around the world.Our people are our business. Talent is precious to us and we create an environment in which individuals can reach their full potential, unhindered by hierarchy. Our team comprises more than 65 nationalities and we are committed to developing and sustaining a diverse work force. Learn more about us here.

Security Operations Lead

Job DescriptionWe are seeking an experienced Security Operations Lead to build, manage, and continuously improve our internal Security Operations Centre (SOC). Based in Geneva or London, this role combines hands-on cyber defense with team leadership across three global offices (Singapore, London, and Houston). The ideal candidate is a technically proficient cybersecurity professional who can operate as both a senior incident handler (L2/L3) and a people leader shaping our detection and response capabilities.KEY RESPONSIBILITIESSOC Leadership & GovernanceLead a team of 4 SOC analysts/engineers distributed across Singapore, London, and Houston, ensuring 24/7 coverage alignment and consistent service quality.Define and enforce SOC operating procedures, escalation paths, shift handover protocols, and performance metrics (MTTD, MTTR, false-positive rate).Report on SOC performance, threat landscape trends, and risk posture to the CISO and senior stakeholders.Manage the external SOC relationship — act as the primary interface with the outsourced SOC provider, govern service performance, drive continuous improvement, and ensure alignment with internal security objectives.Detection Engineering & Threat ManagementOwn the detection engineering lifecycle: develop, tune, and maintain analytics rules, correlation logic, and custom detections in Microsoft Sentinel (KQL) and across the broader security stack.Continuously improve detection coverage mapped to MITRE ATT&CK, reducing blind spots and noise.Evaluate and integrate threat intelligence feeds to enrich alerts and drive proactive hunting.Incident Response & Hands-on OperationsAct as a senior incident responder (L2/L3), leading triage, investigation, containment, eradication, and recovery for complex security incidents.Coordinate cross-functional incident response with IT, Legal, Compliance, and business units.Conduct post-incident reviews and root-cause analysis; translate findings into detection improvements and process updates.Playbook & Process DevelopmentAuthor, maintain, and test SOC playbooks and runbooks covering the full incident lifecycle (phishing, malware, insider threat, cloud compromise, ransomware, BEC, data exfiltration, etc.).Improve existing playbooks and create new ones based on emerging threats, red team findings, and lessons learned.Drive tabletop exercises and purple-team simulations to validate playbook effectiveness.Red Team Collaboration & Purple TeamingPartner with the internal Red Team to translate adversary emulation results into actionable detection rules and response procedures.Participate in purple-team exercises, validating detection coverage and tuning alerts based on simulated attack paths.Training & Capability DevelopmentMentor and develop SOC team members through structured training plans, knowledge-sharing sessions, and hands-on coaching.Foster a culture of continuous improvement and professional growth across the distributed team. QualificationsExperience & Education4+ years of progressive experience in cybersecurity operations, incident response, or security engineering.Demonstrated experience leading or managing a SOC team, including remote/distributed personnel.Strong understanding of SOC operating models (tiered, hybrid, follow-the-sun).Proven track record of building or significantly improving detection and response capabilities.Technical ExpertiseSIEM & Analytics: Microsoft Sentinel (KQL), log source onboarding, analytics rule development, workbook/dashboard creation.Endpoint Security: Microsoft Defender for Endpoint (MDE), CrowdStrike Falcon (EDR/XDR).Cloud Security: AWS (GuardDuty, CloudTrail, Security Hub) and Microsoft Azure (Defender for Cloud, Entra ID Protection); Wiz for cloud security posture management (CSPM).Data Security & DLP: Microsoft Purview (DLP, Information Protection, Insider Risk), Varonis (data access governance, threat detection).Network & Web Security: Zscaler (ZIA/ZPA), Palo Alto Networks (NGFW, Panorama, Cortex).Incident Response: Digital forensics fundamentals, malware analysis, memory/disk acquisition, chain-of-custody practices.Frameworks: MITRE ATT&CK, NIST CSF, NIST 800-61 (Incident Handling).Soft Skills & LeadershipExcellent communication and stakeholder management skills; ability to translate technical findings for executive audiences.Strong organisational and project-management abilities to coordinate across time zones.Analytical mindset with attention to detail and a bias for action.Preferred qualificationsIndustry certifications: CISSP, CISM, GCIH, GCIA, GCED, SC-200, AZ-500, or equivalent.Experience in the commodity trading, energy, or financial services sector.Familiarity with automation and orchestration (SOAR) platforms, scripting (Python, PowerShell, KQL).Experience with threat hunting methodologies and tools.French language skills (advantageous for Geneva-based candidates).TravelPeriodic travel between Geneva and London offices; occasional travel to Singapore and Houston for team engagement and alignment Company DescriptionVitol is an energy and commodities company with revenues of $331 billion in 2024; its primary business is the trading and distribution of energy products globally – it trades over seven million barrels per day of crude oil and products and, at any time, has 250 ships transporting its cargoes.Vitol’s clients include national oil companies, multinationals, leading industrial companies and utilities. Founded in Rotterdam in 1966, today Vitol serves clients from some 40 offices worldwide and is invested in energy assets globally including 24mM3 of storage, 850kbpd of refining capacity, and 10,000 service stations. To date, we have committed over $2.5 billion of capital to renewable projects and are identifying and developing low-carbon opportunities around the world.