Junior Security Engineer

JUNIOR SECURITY ENGINEER

Fresh out of school and want to defend a real bank? Read on.

📄 12-month fixed-term contract — a full year to learn fast, protect real systems, and build a foundation for your career.

Location: Our Geneva or Lausanne office - you chosse!

About Alpian

We're building the next generation of private banking, digital, personalized, and actually meaningful.

Alpian is the first Swiss digital private bank, combining wealth management and everyday banking in a single mobile app. Our mission? Make investing and banking simple, intuitive, and accessible, without ever compromising on security, trust, or excellence.

We're a small team of bold thinkers and pragmatic engineers who like solving hard problems for real users, in production. No ivory towers, no security theater.

Why this role is different

Most junior security jobs mean staring at a SIEM dashboard closing false-positive tickets. Not here.

You'll help protect a real Swiss bank, its people, its laptops, its Wi-Fi, its cloud, and ultimately its customers' money and trust. You'll touch the whole picture: the endpoint on someone's desk, the identity that logs them in, the network they connect to, and the regulator watching over all of it.

If you graduated recently and you're the kind of person who reads the security advisory before the breach, pokes at how things break, and can't walk past a "default password" without twitching, you'll feel right at home.

The security part

Here's the deal: at a bank, security isn't a feature. It's the product.

Nobody hands us their life savings because our app is pretty. They do it because they trust us to be locked down tighter than anyone else. That trust is your job.

You'll learn to think like an attacker and build like a defender, hardening the fleet of MacBooks your colleagues work on, tightening who can access what, spotting the weird login at 3am, and helping the whole company make the secure thing the easy thing. In a regulated environment, "we think it's fine" doesn't cut it, you'll learn to prove it. That's the rare skill, and it's the one that will define your career.

What you'll be doing

You'll grow into this, we don't expect all of it on day one:

• Help secure and manage our corporate IT fleet: macOS laptops, MDM, disk encryption, patching, and endpoint protection
• Keep the workplace secure: Wi-Fi and network segmentation, zero-trust access, and the basics done properly
• Work on identity and access: SSO, MFA, least-privilege reviews, joiner/mover/leaver hygiene
• Monitor, triage, and investigate security alerts and learn to tell a real signal from noise
• Help with vulnerability management: scanning, prioritizing, chasing fixes to done
• Support phishing defense and security awareness, because humans are the biggest attack surface
• Contribute to compliance and audit evidence (FINMA, ISO-style controls) and learn why documentation is a security control too
• Write small scripts and automations to make all of the above less manual

What we're looking for

We're hiring for potential and attitude, not a decade of experience.

• A recent degree in Computer Science, Cybersecurity, IT, or a related field (or a self-taught path that proves you can dig in)
• Genuine curiosity about how systems work, and how they fail
• Solid fundamentals: networking (TCP/IP, DNS, TLS), operating systems (especially macOS and Linux), and the basics of how attacks happen
• Some scripting ability (Python, Bash, or similar) or eagerness to get there fast
• A methodical, evidence-driven mindset, you like to verify, not assume
• Clear communication and the humility to ask good questions
• Integrity and discretion, you'll be trusted with sensitive things, early

Nice to have (truly optional)

• A home lab, a CTF habit, a Hack The Box / TryHackMe streak, or that one time you set up your own firewall for fun
• Exposure to MDM (Jamf, Intune), an IdP (Okta, Ping, Entra), or a SIEM
• Any cloud security curiosity: GCP, AWS, or Azure
• A security cert in progress (Security+, or working toward it) - nice, but your curiosity matters more
• Interest in regulated environments and why banks play defense differently

Our world

macOS fleet & MDM · zero-trust networking · SSO / MFA / IdP · endpoint detection · vulnerability scanning · cloud security on GCP · SIEM & alerting · scripting & automation · and the FINMA-grade rigor that ties it all together

Don't know all of these? Neither did we, once. You'll learn them here.

What you'll get

• Real responsibility for protecting real people, early
• Mentorship from engineers who actually want to teach
• Exposure to the whole security stack, endpoint, network, identity, cloud, compliance, not one narrow slice
• A small, ambitious team where your work is visible and your ideas count

Ready to defend the future of banking? We'd love to see what you've built or broken - labs, CTF write-ups, projects, and curiosity welcome alongside your CV.