The role
Detect, investigate and respond to security threats across client environments as part of our 24/7 Security Operations Center.
Responsibilities
- Triage and investigate security alerts escalated from L1
- Lead containment and remediation during security incidents
- Tune detection rules and reduce false positives in the SIEM
- Perform threat hunting and track emerging attacker techniques
- Document incidents and produce clear reports for clients
- Collaborate with engineering to harden client environments
What we're looking for
- 3+ years in a SOC or incident-response role
- Hands-on experience with SIEM/EDR tooling (e.g. Sentinel, Splunk, CrowdStrike)
- Solid understanding of attacker tactics (MITRE ATT&CK) and network security
- Ability to work on-call rotations within a 24/7 model
- Clear written and spoken French and English
Nice to have
- Certifications (GCIA, GCIH, Security+)
- Scripting for detection/automation
- Cloud security experience
