Detection Engineer SOC (MDR) - Cybersecurity - Toulouse

About the company

Sopra Steria, a major player in Tech in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, services, and digital solutions activities. It helps its clients lead their digital transformation and achieve concrete and lasting benefits. The Group provides a global response to the competitiveness challenges of large companies and organizations, by combining deep knowledge of business sectors and technologies with a collaborative approach. Sopra Steria places people at the heart of its action and is committed to its clients to make the most of digital technology to build a positive future. In 2025, the Group achieved a turnover of 5.6 billion euros.

**The world is how we shape it*​** Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN Code: FR0000050809​

The world is as we shape it _Sopra Steria's Cybersecurity Business Line is present in Europe with more than 2500 experts - more than half of whom are in France -, our mission is to provide trusted solutions and services to the most exposed public and private actors to ensure the resilience of their critical systems and protect their sensitive digital assets.__​_

_Beyond its strong European presence, the cybersecurity division is positioning and developing itself in North America (Toronto), as well as in Asia Pacific (Singapore).__​_

_We offer 3 domains of offerings: Prevention, Protection & detection and response. These 3 domains work together to provide our clients with homogeneous information and decision-making capabilities informed by operational reality. This approach is based on our transverse methodology centered on Mitre Att&ck.__​_

_Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience against cyberattacks and accelerate your digital transformation.__​_

• _A trusted end-to-end solution__​_
• _A "security by design" approach centered on business risks and transverse to the organization.__​_
• _A commitment to the development of innovative sovereign solutions.__​_

Each individual can have an impact on the response to these new cyber risk challenges. Everyone contributes both individually and collectively to securing our clients and society while maintaining their personal and professional growth.

Your tasks

Faced with the rapid evolution of threats, Sopra Steria has evolved its cybersecurity model towards an integrated Managed Detection & Response (MDR) approach, oriented towards operational results and business relevance. Our MDR teams operate a complete chain of detection, investigation, and response, relying on recognized standards such as MITRE ATT&CK, a strong industrialization culture, and an agnostic approach towards vendors.

Your role and missions You will join a SOC of about fifteen people, operating in a high-criticality environment, allowing you to quickly understand the technical and operational challenges of our clients.

As a SOC Analyst – MDR Detection, you are a key player in the quality and effectiveness of cyber detection for our clients.

You actively contribute to monitoring, investigation, incident handling, as well as the continuous improvement of detection capabilities, in order to detect earlier, more precisely, and with real operational impact.

Monitoring & investigation

• You ensure the monitoring of cybersecurity alerts reported by SIEM/XDR solutions.
• You perform technical investigations, in-depth diagnostics, and context analysis.
• You handle security incidents, propose remediation measures, and provide appropriate responses to users and client teams.

Advanced analysis & Threat Hunting

• You perform malware analysis and conduct threat hunting activities to identify advanced malicious behaviors.
• You deepen the analysis of logs and alerts from IT, Cloud, Identity, and Network environments.

Detection & continuous improvement

• You participate in the creation and improvement of detection use cases as well as detection, investigation, and response playbooks.
• You contribute to the continuous improvement of the Detection service, by reducing noise, increasing the relevance of alerts, and strengthening MITRE ATT&CK coverage.

Requirements

You are a graduate of an engineering school or equivalent, with at least 4/5 years of experience in cybersecurity (excluding internship and apprenticeship experiences), including significant experience in SOC / MDR Detection. You are autonomous, rigorous, methodical, with a real spirit of initiative. You enjoy teamwork, solving technical challenges, and demanding environments. You are curious, possess good communication skills, and are driven by a strong interest in cybersecurity. You have fluent English, both written and spoken.

Technical & methodological environment

• You use a Splunk SIEM for the detection, analysis, and investigation of security incidents.
• You integrate and operate multi-vendor SIEM / XDR solutions within complex environments.
• You monitor and secure IT, Cloud, Identity, and Network environments.
• You rely on the MITRE ATT&CK framework to structure, map, and prioritize detection.
• You automate and industrialize SOC processes via a SOC DevOps approach.
• You leverage AI applied to detection to improve threat identification and reduce false positives.

What we offer

• A teleworking agreement to work from home up to 2 days per week depending on your missions.
• An attractive benefits package: health insurance, CSE, restaurant vouchers, profit-sharing, holiday bonuses, and referral bonuses.
• Multiple career opportunities: more than 30 job families, as many gateways to imagine together.
• Hundreds of training courses to develop your skills and evolve within the Group.
• Self-paced training platforms to prepare for your certifications and support your personal development.
• The possibility to get involved with our foundation or our partner "Vendredi".
• The opportunity to join the Tech'Me UP collective (training, conferences, monitoring, and much more...).

Other

For more information, find us at www.soprasteria.com/fr​

Additional information CDI- Toulouse- Detection Engineer MDR- SIEM, SOC Incident management, Splunk, creation of Use Case & detection playbooks

An inclusive and committed employer, our company works every day to fight all forms of discrimination and promote a respectful working environment. This is why, committed to diversity and inclusion, we encourage all applications and all profiles.