Cybersecurity SOC Technician / Senior SOC Analyst (M/F)

Your tasks

Your missions will be as follows

• Define and implement the detection and collection strategy
• Define and implement a log collection and retention policy
• Implement, maintain, and evolve the detection strategy
• Implement detection rules
• Write reflex sheets (XSOAR, Gitlab)
• Perform fine tuning of rules, filters, and detection and response use-cases to automate detection and reduce false positives
• Define and implement investigation and countermeasure standards
• Enrich detection with client context elements
• Develop and maintain automation across client perimeters
• Contextualize client detection for the SOC
• Act as a proactive advisor to clients regarding the improvement of their detection
• Participate in project steering committees and support service managers in report production (monthly activity reports, progress/implementation files)

Requirements

What profile for the position

• Minimum of 2 years of experience in a SOC environment
• Fluent English (reading, writing, speaking), comfortable in an international context
• Autonomous, curious, rigorous, and reactive
• Good adaptability
• Good writing skills
• Sensitivity to incident management best practices and the importance of reporting
• Sense of service quality and customer satisfaction
• Awareness of information protection and sense of discretion
• Comfortable interacting with multiple stakeholders

What skills for the position

• Knowledge of a SIEM solution
• Knowledge of a SOAR solution: XSOAR
• Understanding of log parsing and analysis
• Development of detection and correlation rules
• Tuning and implementation of security indicators / reporting
• Automation through scripting (Bash, Python)
• Mastery of GNU/Linux and Windows OS
• Mastery of network and security protocols
• Cybersecurity monitoring (threats, vulnerabilities)
• Good mastery of Gitlab
• Knowledge of log management technologies: Rsyslog, Bindplane
• Mastery of investigation processes
• Technical mastery of EDR solutions
• Operational security
• Security incident handling processes
• SOC / SIEM analysis (Front Office or Back Office) and risk analysis
• IT operations in a production environment
• ITIL best practices