Job Description

About Hero Group

Hero is a global food company, founded in 1886 in Switzerland, specializing in branded nutritional products across the Growing Up and Adult categories. With a portfolio of trusted brands like Corny, Semper, Goodies, Beech-Nut, Organix, and Deliciously Ella, Hero delivers high-quality, great-tasting food rooted in natural goodness. Guided by its mission to be a leader in better snacking. With 4,000 team members worldwide, the company is driven by strong values, high performance, and a commitment to doing the right thing—always, without compromise.

About the role

The Security Specialist is a hands-on operational cybersecurity role, responsible for day-to-day security monitoring, alert investigation and incident handling within the HERO Group.

The role acts as a second-line security function and works closely with SOC/MDR partners, IT teams and business stakeholders to ensure timely detection, analysis, containment and remediation of security threats, in line with NIS2 requirements and HERO security policies.

Key responsibilities:

Security Monitoring & Alert Investigation

• Continuously monitor and investigate security alerts from SOC, SIEM, EDR and vulnerability management tooling (Qualys Cloud).
• Perform triage to distinguish false positives from real threats.
• Investigate endpoints, identity, network and data leakage related alerts and determine impact, scope and root cause.

Incident Handling & Response

• Act as primary operational handler for cybersecurity incidents.
• Coordinate containment, mitigation and recovery with IT teams and external security partners.
• Ensure incidents are classified, documented and escalated according to HERO procedures.
• Support NIS2-compliant incident reporting and post-incident reviews.

Vulnerability & Threat Follow-up

• Monitor vulnerability scan results and threat intelligence feeds.
• Assess exploitability and business relevance.
• Coordinate and track remediation actions and follow emerging threats and zero-day vulnerabilities.

AI Security (Operational)

• Monitor and investigate security alerts related to AI usage, including data leakage, misuse of generative AI and suspicious AI-driven activity.
• Act as point of contact for AI-related security incidents and support enforcement of secure AI usage guidelines.

Operational Compliance (NIS2)

• Apply NIS2 requirements in daily security operations, including incident severity assessment, response timelines, evidence collection and documentation.
• Support audits by providing operational insights and incident evidence.

Collaboration & Continuous Improvement

• Work closely with SOC/MDR providers to improve detection quality.
• Identify gaps in monitoring and response and contribute to continuous improvement of security operations and awareness.

Preferred Certifications

• Security operations or blue team-oriented certifications.
• Experience with SIEM, EDR and vulnerability management tooling.
• Familiar with managing security settings in Microsoft 365 environments.

About you:

• Bachelor level or higher in the field of information technology or relevant professional experience
• Broad hands-on knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices
• Proven hands-on experience in security monitoring, alert investigation and incident response
• High level of analytical and problem-solving abilities.
• Ability to conduct research into security issues and products as required.
• Strong interpersonal and communication (both verbal and in writing) skills.
• Highly self-motivated and directed.
• Excellent attention to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Experienced working in a team-oriented, collaborative environment.
• Fluent in English language
• Ideally you have certifications or equivalent knowledge of: CC / SSCP; ISO 27001 / NIS2; Qualys; SentinelOne (EDR); Microsoft Azure AD / 365

About us

Our culture

At Hero, we believe great companies are built by people who are empowered to make a real impact. We have an open, flexible, and informal way of working, where everyone has a voice in shaping what we do and how we do it. We collaborate with colleagues across our international organisation.

With short decision-making lines and a flat structure, ideas move quickly and contributions are recognised. We don’t hire people to follow instructions—we hire people who want to take ownership and make their mark. If you spot an opportunity, you’re encouraged to act on it, and if you’re ambitious, you’ll find the freedom to grow.

Creativity, curiosity, and an entrepreneurial mindset are part of everyday life at Hero. We trust our people to drive their own development, support one another, and push boundaries together. Just as importantly, we genuinely enjoy working together and looking out for each other.

We offer a flexible hybrid working model that supports a healthy work–life balance.

Our Values

Our Values are at the heart of everything we do. Developed through an inclusive process involving colleagues from across the business. They guide how we work, collaborate, and succeed together. They reflect who we are today and the future we are building.

Create Wow – We go beyond expectations and strive to make a meaningful im-pact.

Everyone Hero – Every individual matters and every contribution counts.

Nourish Others – We support, inspire, and help each other grow.

Take Responsibility – We own our actions and outcomes, individually and as a team.

We look forward to receiving your application before the 31st May