SIEM Administrator - Cybersecurity - Rennes

About the company

Sopra Steria, a major player in Tech in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, services, and digital solutions activities. It helps its clients lead their digital transformation and achieve concrete and lasting benefits. The Group provides a global response to the competitiveness challenges of large companies and organizations, by combining deep knowledge of business sectors and technologies with a collaborative approach. Sopra Steria places people at the heart of its action and is committed to its clients to make the most of digital to build a positive future. In 2025, the Group achieved a turnover of 5.6 billion euros.

The world is as we shape it _Sopra Steria's Cybersecurity Business Line is present in Europe with more than 2500 experts - more than half of whom are in France -, our mission is to provide trusted solutions and services to the most exposed public and private actors to ensure the resilience of their critical systems and protect their sensitive digital assets.__​_

_Beyond its strong European presence, the cybersecurity division is positioning and developing itself in North America (Toronto), as well as in Asia Pacific (Singapore).__​_

Your tasks

_We offer 3 domains of offerings: Prevention, Protection & detection and response. These 3 domains work together to provide our clients with homogeneous information and decision-making capabilities informed by operational reality. This approach is based on our cross-functional methodology centered on Mitre Att&ck.__​_

_Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience to cyberattacks and accelerate your digital transformation.__​_

• _A trusted end-to-end solution__​_
• _A "security by design" approach centered on business risks and cross-functional to the organization.__​_
• _A commitment to the development of innovative sovereign solutions.__​_

Each individual can have an impact on the response to these new cyber risk challenges. Everyone contributes both individually and collectively to securing our clients and society while maintaining their personal and professional growth.

Your roles and missions Within the Solution team, your activities revolve around the following topics:

• You operate in an international and multi-client environment with a multitude of constantly evolving SIEM infrastructures
• You design solutions, you perform the design and implementation of SIEM infrastructures, systems, and applications as well as log pools
• You perform the BUILD and the RUN of SIEM security solutions (infrastructure deployment, data ingestion, implementation of supervision, incident monitoring, …)
• You maintain in operational and security conditions (MCO/MCS) SIEM security infrastructures and resources (resource management, patch management, collection management, migrations …)
• You supervise infrastructures and intervene on production incidents (restoration of the detection service, restoration of collection in the event of log loss, improvement of supervision following incident feedback, …)
• You provide support to project teams on complex points relating to your field of expertise
• You rely on automation solutions to improve the service and industrially deploy configurations and infrastructures
• You support clients on a daily basis to collect the right data in a relevant manner (protocol, data format, collection architecture, …)
• You apply and develop business and security best practices
• You propose and implement continuous improvement of tools and processes
• You participate in responses to Calls for Tender in order to propose solutions that best meet the client's specifications

Requirements

Technical environment

• SIEM: SPLUNK, IBM QRadar, Microsoft Azure Sentinel, SEKOIA, Palo Alto XSIAM (architecture, administration, collection management, updates, dashboarding …)
• Log pools: Rsyslog, ELK, Syslog-ng Store Box
• System: Linux (Red Hat, Ubuntu 24)
• Automation: Ansible, GitLab/GitHub, Terraform
• Supervision: Zabbix, Centreon
• Cloud: Azure, AWS, Outscale, OVH

Your profile A graduate of an Engineering school or equivalent, you benefit from significant experience in the integration, administration, and maintenance in operational conditions of security alert detection Solutions, as well as in the administration of Information Systems.

You have an interest in the field of Cybersecurity!

Possessing strong adaptability and the ability to solve complex problems in sensitive environments, you have recognized writing skills, a good analytical mind, and a sense of service.

You have a fluent level of English, both written and spoken.

Do you want to work on projects that combine technical challenges, new technologies, and innovation? Join a company that is committed to national and international communities to influence the development of cyber norms and standards. Sopra Steria is the first member of the Mitre Affiliate Program in Europe, and actively participates in OASIS and InterCERT.

What we offer

What we offer you

• A teleworking agreement to telework up to 2 days per week depending on your missions.
• An attractive benefits package: health insurance, CSE, restaurant vouchers, profit-sharing, holiday bonuses, and referral bonuses.
• Multiple career opportunities: more than 30 job families, as many gateways to imagine together.
• Hundreds of training courses to develop your skills and evolve within the Group.
• Self-paced training platforms to prepare for your certifications and support your personal development.
• The possibility to get involved with our foundation or our partner "Vendredi".
• The opportunity to join the Tech'Me UP collective (training, conferences, monitoring, and much more…).

Other

**The world is how we shape it*​** Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN Code: FR0000050809​

For more information, find us at www.soprasteria.com/fr​

Job description Your future working environment You are joining the Security Operation Services (SOS) pole within the Digital Platform department of our Toulouse and Rennes Cybercenter, and becoming an active member in the design, deployment, and maintenance of SIEM infrastructures and resources (SPLUNK, QRADAR, XSIAM, SEKOIA, etc…) enabling the implementation of data collection platforms to ensure the security of the various clients of the Sopra Steria Cybercenter.

Additional information An inclusive and committed employer, our company works every day to fight against all forms of discrimination and promote a respectful working environment. This is why, committed to diversity and inclusion, we encourage all applications and all profiles.