Cyber Security CV: Example and Template
A complete Swiss CV example for cyber security professionals - with measurable SOC metrics, references to standards, and wording that convinces HR and CISOs.
Currently 72 open Cyber Security positions in Switzerland, across 6 cantons, 28 of them from the last 7 days. Generali Switzerland advertises the most.
CV example — two-page template
This template is editable straight away — or upload your existing CV and it is carried into this layout automatically.
Which qualification counts for cyber security in Switzerland?
Recognised qualifications are primarily the Cyber Security Specialist Federal Diploma of Higher Education, the ICT Security Expert Advanced Federal Diploma, and a university of applied sciences/ETH degree specialising in information security - complemented by vendor certifications.
The classic Swiss path leads through an EFZ as a computer scientist (platform development or operational IT), followed by the Federal Diploma of Higher Education examination to become a Cyber Security Specialist, or the advanced examination to become an ICT Security Expert with a Federal Diploma. If you have taken this path, write the titles exactly as they are, including the addition 'Federal Diploma of Higher Education' or 'Federal Diploma' - HR systems and recruiters filter precisely for these designations.
From the higher education sector, a BSc/MSc in Computer Science from a university of applied sciences (for example with a specialisation in Information & Cyber Security), a CAS or MAS in Cyber Security, or the Cyber Defence programme run by the Swiss Armed Forces or ETH are common. For foreign qualifications, add a line on equivalence (SBFI recognition) and your work status, for example 'Permit B, permanent' - this saves the HR department a follow-up question.
Vendor certifications don't replace a formal qualification, but they often determine whether you get invited to interview. List a maximum of four current certifications with the year, for example CISSP, CISM, GCIH, OSCP, SC-200 or ISO/IEC 27001 Lead Auditor, and leave out expired older ones. For positions with the federal government, cantons, hospitals or critical infrastructure, also mention a passed personnel security clearance and your willingness to work on-call.
How should I structure my work experience in a cyber security CV?
For each position, describe the security context (environment, regulator, team size) and list three to four bullet points below it with hard figures from detection, response and compliance.
One sentence of context before the bullet points is what makes your figures readable: 'Regional bank, 12'400 endpoints, 1'800 alerts per month, supervised by FINMA, 6 analysts on a 24/7 on-call rotation.' Without this framing, the reader has no way of knowing whether you managed an SME with 80 clients or a large corporation - and that is exactly what determines the fit for the role.
Quantify what is actually measured in a security operations centre: MTTD and MTTR, the number and quality of detection use cases, the false-positive rate, patch compliance, SLA fulfilment for critical vulnerabilities, phishing click and reporting rates, the number of incidents handled by category, and audit results (for example, 'ISO/IEC 27001 recertification with no major findings'). Use the outcome pattern: action, tool, impact in figures.
Also show the breadth that Swiss employers look for: technical depth (threat hunting, forensics, hardening to CIS Benchmarks), regulatory knowledge (ISO/IEC 27001, ICT Minimum Standard, revDSG, FINMA Circular 2023/1, mandatory reporting to BACS), and collaboration with business units. Address any gaps in your CV in a single line, such as further training or military service, and consistently anonymise sensitive client details - discretion is itself a selection criterion in this profession.
How long should the CV be, and should it include a photo?
Two pages is the standard, and a professional portrait photo is customary and still well received in Switzerland.
Stick to two pages: profile, at-a-glance metrics, work experience from the last ten to twelve years, skills and tools, education, certificates, languages. Summarise older positions in a single line. With more than 15 years of experience or an extensive project list, three pages are acceptable as long as every line adds value; send it as a PDF named 'CV_Lastname_Firstname.pdf'.
A photo is customary in Switzerland, though not mandatory: neutral background, business attire, a current picture. Also include your place of residence with canton, year or date of birth, nationality or permit, and a reachable mobile number. Leave out marital status and religion. If you hold a passed personnel security clearance, a security clearance, or are willing to work 24/7 on-call, mention this in the header or profile.
Tailor your profile and keyword list to each job posting: a SOC analyst listing calls for SIEM, detection engineering and incident response, while an Information Security Officer role focuses more on ISMS, risk analysis and audit support. Only state salary expectations if requested - the going rate for experienced cyber security professionals is around CHF 110'000 to CHF 150'000 per year, more at management level. Keep a set of reference letters and copies of certificates ready as a separate PDF.
Where Cyber Security are hired in Switzerland
How the 72 open positions are spread across the cantons.
Figures as a table
| Canton | postings |
|---|---|
| Zürich | 10 |
| Genf | 5 |
| Bern | 4 |
| Basel-Stadt | 3 |
| Aargau | 2 |
| Freiburg | 2 |
Which languages the postings require
Of 60 postings that state a language — in brackets, those requiring professional level.
Figures as a table
| Language | postings |
|---|---|
| German | 50 (46) |
| English | 26 (24) |
| French | 6 (5) |
| Italian | 1 (1) |
Who hires Cyber Security in Switzerland
Employers with the most open positions. Staffing agencies are excluded.
Figures as a table
| Employer | postings |
|---|---|
| Generali Switzerland | 4 |
| Deloitte | 4 |
| Etat de Fribourg - Staat Freiburg | 2 |
| UBP - Union Bancaire Privée | 2 |
| Bertrandt Group | 2 |
| pwc | 2 |
Full-time or part-time?
How the positions are advertised.
Figures as a table
| Workload | postings |
|---|---|
| Vollzeit / plein temps | 66 |
| Teilzeit / partiel | 1 |
The CV in full
To read through and reuse.
Reto Bühlmann
Senior Cyber Security Analyst (SOC Lead), ICT Security Expert with Federal Diploma, CISSP
Cyber security specialist with 11 years of experience in detection & response, vulnerability management and ISMS operations at a regional bank and an energy utility. I lead a 6-person SOC team on a 24/7 on-call rotation, operate 43 detection use cases based on MITRE ATT&CK, and have reduced the mean time to detect from 4 hours to 22 minutes. My strength lies in combining technical depth (threat hunting, forensics) with regulatory requirements from FINMA Circular 2023/1, ISO/IEC 27001 and the ICT Minimum Standard.
What sets me apart
Detection engineering instead of alert management: I develop KQL and Sigma rules aligned with MITRE ATT&CK and validate them with Atomic Red Team; this reduced the SOC's false-positive rate from 61% to 18% across 43 active use cases.
Regulatory expertise in the financial and infrastructure sectors: Experience with FINMA Circular 2023/1 (Operational Risks and Resilience), revDSG reporting obligations, and mandatory cyberattack reporting to BACS for critical infrastructure - including creation of 14 reporting templates and escalation paths.
Incident response backed by proven exercise practice: I plan and lead tabletop and red team exercises: 9 exercises in 3 years, reducing crisis team activation time from 90 to 25 minutes, documented in a NIST CSF-based maturity model.
OT and IT security under one roof: Built network segmentation according to IEC 62443 (Purdue levels) for 7 substations and 320 field devices - the basis for demonstrating compliance with the ICT Minimum Standard to the canton.
Key achievements
Detection time reduced by 91%. Migrated 4 log silos into a central SIEM (Microsoft Sentinel, 780 GB/month) with 43 use cases and automated playbooks: MTTD from 4 hours to 22 minutes, MTTR from 11 to 3.5 hours.
Contained a ransomware incident within 6 hours. As incident lead, isolated 38 compromised clients, broke the domain admin chain, and achieved recovery without paying a ransom; business disruption of 6 hours instead of the 3 days assumed in the BCM, avoiding damages of approximately CHF 1'200'000.
Reduced phishing click rate from 27% to 6%. Ran 12 awareness campaigns for 1'450 employees with role-specific training and a reporting button; reporting rate tripled to 41%, licence costs reduced by CHF 84'000 per year through tool consolidation.
Experience
Senior Cyber Security Analyst / SOC Lead — Talstern Bank AG, Zurich, since 03/2021
Regional bank with 1'450 employees, 12'400 endpoints, supervised by FINMA; leading 6 analysts on a 24/7 on-call rotation.
- SIEM consolidation onto Microsoft Sentinel (780 GB/month, 43 use cases): MTTD from 4 h to 22 min, false positives from 61% to 18%
- Led 27 category 2/3 security incidents, including 1 ransomware case contained within 6 hours, avoiding damages of approx. CHF 1'200'000
- Prepared the 2023 ISO/IEC 27001 recertification with no major findings and closed 19 of 22 minor findings within 5 months
- Built a vulnerability management process with Tenable: critical vulnerabilities remediated in an average of 9 days instead of 47 (96% SLA compliance)
Cyber Security Engineer — Aarewerk Energie AG, Aarau, 08/2017 - 02/2021
Regional energy utility with 7 substations; IT/OT environment within the scope of the ICT Minimum Standard.
- Implemented network segmentation per IEC 62443 for 7 substations and 320 field devices; reduced the attack surface in the control system network by 74%
- Rolled out EDR (CrowdStrike Falcon) to 2'100 systems within 5 months, with a rollout error rate below 2%
- Raised the ICT Minimum Standard self-assessment maturity level from 1.8 to 3.4 (out of 4) and demonstrated this in 3 audits to the canton
- Negotiated a 24/7 on-call concept with an external MSSP: response time contractually fixed at 15 minutes, annual cost CHF 130'000 under budget
ICT Systems Technician with a focus on Security — Sentinova IT Services GmbH, St. Gallen, 09/2013 - 07/2017
IT service provider for 45 SME clients in eastern Switzerland; firewall, backup and patch operations.
- Operated and hardened 45 client firewalls (Fortinet), cleaned up 380 open rules and reduced rule sets by 44%
- Increased patch compliance across all clients from 68% to 94% within 12 months
- Introduced 31 backup restore tests per year; identified and corrected 4 unusable backup chains before they were needed in an emergency
- Produced 22 security reports for SME management, leading to 9 follow-up projects worth CHF 310'000 in order volume
Education
ICT Security Expert, Advanced Federal Diploma of Higher Education (Professional Examination), Information Security Management, Incident Response — ICT-Berufsbildung Schweiz · 2020
Cyber Security Specialist, Federal Diploma of Higher Education, Security Operations, Network and Systems Security — Federal Diploma of Higher Education Examination, ICT-Berufsbildung Schweiz · 2016
CAS Cyber Security, Threat Intelligence, Cryptography, Security Architecture — Hochschule Luzern - Informatik · 2019
Federal Diploma of Vocational Education and Training (EFZ), Computer Scientist, Specialising in Systems Engineering — Berufsfachschule St. Gallen · 2013
CISSP (ISC2), 2022 · GIAC Certified Incident Handler (GCIH), 2021 · ISO/IEC 27001 Lead Auditor (SQS), 2020 · Microsoft Certified: Security Operations Analyst (SC-200), 2023
Common questions
- What language should I write my CV in as a Cyber Security?
- 67% of adverts are in German, 30% in English. In this occupation two versions earn their keep.
- Where in Switzerland are Cyber Security most in demand?
- Spread out, Zurich first at 14%, then Geneva and Bern. Across a language border, apply with the matching version.
- What language level do Cyber Security adverts ask for?
- German in 83% of adverts that state a requirement, 92% of them at professional level. "Good knowledge" will not do — give A2 to C2.
- Are Cyber Security roles offered full or part time?
- 99% full time, only 1% part time. If you need part time, say so early rather than leaving it open.
- Who hires Cyber Security in Switzerland?
- Currently Generali Switzerland, Deloitte, Etat de Fribourg - Staat Freiburg, among others. Their adverts are the best word list for your own CV.