Manager (M/F)

Job Description:

The SOC Manager leads the Loxam Group's Security Operations Center, composed of an internal team and an MSSP partner. They ensure continuous monitoring, detection, analysis, and response to security incidents, while ensuring consistency, quality of service, and the evolution of the SOC's operational capabilities. Their main missions include the operational management of the SOC through the supervision and coordination of teams (internal and MSSP). They are responsible for the quality of service and compliance with SLAs, the management and development of the internal SOC team internationally (recruitment, training, skill development), ensuring the proper organization of the department (roles, escalation), the maintenance and improvement of SOC processes including documentation, the production of indicators & dashboards, the monitoring of improvement plans, as well as internal and external governance with the MSSP, and the supervision and evolution of the platforms under the SOC's responsibility (SIEM, SOAR, Threat Intelligence). This includes log collection as well as the development, prioritization, automation, and optimization of detection rules, alerts, and remediations, investigation into weak signals or incidents, and participation in crisis management in the event of a confirmed incident. The coordination of the incident response chain in connection with technical experts and the CISO.

They are expected to work in collaboration with the infrastructure and application teams within the various IT departments of the Group, as well as with all business functions of the different entities throughout the world.

Additional Information

Remuneration according to profile and benefits: Monthly bonus, 13th month, RTT, Profit-sharing + Participation, CSE benefits.

Profile Description:

Profile sought***Fluent English, read, spoken, and written.

• From a Bac +5 or equivalent training with 4/5 years of experience in a similar role is expected.
• Good knowledge of the tools and techniques used to assess the security level of IS (OS, DB, network). Good knowledge of security solutions (SIEM, SOAR, EDR, Threat Intelligence). Good understanding of operating systems and associated security best practices as well as cloud solutions such as M365, Azure, and AWS.
• One (or more) certification(s) such as GCIA, GCIH, GRID, CISM, or CISSP is a plus.
• Frameworks: MITRE ATT&CK, NIST CSF, ISO 27001.

Behavioral Skills***Leadership, communication, popularization.

• Stress and crisis management.
• Organization, rigor, pragmatism, and management by indicators.
• Ability to work in demanding environments.