Eric Stautmeister Cyber security analyst
and detection engineer

Eric Stautmeister

Blue Team Cybersecurity Professional

I am a passionate CompTIA Security+ and BTL1 certified Cyber Security Professional and homelabbing enthusiast with 2+ years of experience working for Swisscom in a Security Operation Center, where I specialize in analysing and remediating security incidents.

At
Swisscom (Schweiz) AG · Zurich
Since
July 2024
Now
Analyst and detection engineer

About

My interest in security started in high school, alongside programming, networking and ethical hacking. It ended up as my Matura thesis on post-quantum cryptography — what happens to today's encrypted data once quantum-era attacks are practical — and then as a job.

Two years in Swisscom's Security Operation Center have taken me from handling alerts to writing the detections that raise them. I now build custom detections and test them end to end, work complex internal incidents, and automate the parts of the loop that should never have been manual, including AI-powered workflows in Python.

The homelab is the other half of that. Everything I run at home — Proxmox, Keycloak, reverse proxies, DNS, Terraform, Ansible — exists so that a detection or a playbook can be proven somewhere real before it is trusted anywhere else.

Outside of work, you will find me learning languages, building side projects, working on the homelab, playing video games, or reading fantasy or sci-fi novels and manga.

In the SOC
2+ yrs
Certifications
Security+ · BTL1

Security tooling

  • Splunk
  • Cortex XSOAR
  • Cortex XDR
  • MS Defender / ATP
  • MISP
  • Velociraptor
  • Crowdstrike
  • Mandiant
  • Cisco Stealthwatch
  • Vectra
  • Exeon
  • CyberArk
  • Symantec DLP
  • Thinkst Canary
  • ServiceNow
  • Jira

Engineering

  • Python
  • TypeScript
  • JavaScript
  • Rust
  • Docker
  • Proxmox
  • Terraform
  • Ansible
  • GitLab
  • Keycloak
  • Nginx
  • Wazuh
  • NetBird
  • N8N
  • Kestra
  • Ollama

Experience

Swisscom · Zurich · Feb 2026 — now

Cyber Security Analyst and Detection Engineer

  • Developing custom detections, with end-to-end and quality testing before they go live
  • Handling complex internal incidents in the Swisscom internal SOC
  • Continuous improvement of internal processes and tooling
  • Engineered AI-powered automation workflows using Python, Amazon Bedrock, Azure AI Foundry and internal tooling

Swisscom · B2B MSSP SOC and TDR · Aug 2025 — Feb 2026

Junior Cyber Security Analyst

  • Worked the high-volume B2B MSSP SOC and TDR service, handling high-priority incidents for enterprise customers
  • Tooling: Cortex XDR, Cisco Stealthwatch, Vectra, Exeon, CyberArk and ServiceNow
  • Performed threat hunts across customer infrastructure
  • Published a threat hunt and technical analysis of the EvilAI trojan

Swisscom · internal SOC · Jul 2024 — Aug 2025

Junior Cyber Security Analyst

  • Handled alerts through SIEM and SOAR tooling — Splunk, Cortex XSOAR, MS Defender — alongside MISP, Defender ATP, Velociraptor, Symantec DLP, sandboxing, Thinkst Canary, Mandiant and Crowdstrike
  • Engineered tooling and detection improvements as part of continuous improvement strategies

SpinningBytes AG · Winterthur · Sep 2023 — Dec 2023

IT Intern

  • Architected a full-stack web application for chess analysis, with secure SQL database schemas and Docker-based deployment pipelines
  • Internal site improvements in WordPress

Certifications and education

Jan 2026
Blue Team Level 1 (BTL1) — Security Blue Team
Jul 2025
CompTIA Security+ ce
2019 – 2023
Federal Matura, Kantonsschule Büelrain Winterthur — Business and Law with English immersion, elective Computer Science. Matura thesis "The Future Security of Our Current Data — Post-Quantum Cryptography", graded 6.
2017 – 2019
Kantonsschule Rychenberg Winterthur — long-term gymnasium

Contact

Open to detection engineering, incident response and security automation work.

LinkedIn
linkedin.com/in/eric-stautmeister
Credly
credly.com/users/eric-jaden-stautmeister
Based in
Zurich, Switzerland

Downloads

EvilAI malvertising threat hunt and Matura thesis — post-quantum cryptography available on request, see contact details above.