Internship Soc Analyst

Il y a 2 jours

Marseille, Provence-Alpes-Côte d'Azur, France CMA CGM Temps plein 42 000 € - 65 000 € Contrat

YOUR ROLE

Your main mission will be to protect the CMA CGM Group by detecting and responding to cyber incidents. In a context where threats are growing in number and complexity, you will have the opportunity to work within a dynamic, motivated team equipped with high-level security solutions. You will report to the SOC Manager.

WHAT WILL YOU DO?

  • 24/7 operational monitoring: You will take part in a 24/7 operational SOC, working in rotation (Following the Sun).
  • Analysis and detection: You will analyze, contextualize and monitor security alerts from advanced platforms.
  • Investigation and escalation: You will investigate security events, communicate findings and escalates incidents according to procedures.
  • Stakeholder support: You will handle security service requests (responding to subsidiaries/stakeholders, analyzing malicious or suspicious files).
  • Incident response: You will support incident response (IR) whenever analysis confirms an actionable incident.
  • Threat hunting: You will take part in Threat Hunting exercises and sessions with the CTI (Cyber Threat Intelligence) team.
  • Continuous improvement: You will optimize SOC use cases (detection rule tuning) and contribute to designing and improving playbooks, standard operating procedures (SOPs) and guidelines.
  • Simulations and collaboration: You will take part in incident response simulations and work closely with the SOC RUN Manager, the Lead and the Manager on various tasks and projects.

WHO ARE WE LOOKING FOR?

  • Education: Master's degree in Computer Science, Cybersecurity, Networks or a related field.
  • SOC tools: Proficiency with SIEM, SOAR, as well as network/host logs, firewalls, IPS/IDS and email security gateways.
  • Technical knowledge: Solid understanding of cybersecurity principles and best practices, attack methodologies (Cyber Kill Chain, MITRE ATT&CK), common attack vectors, and concepts such as perimeter defense, endpoint management and data loss prevention (DLP).
  • Programming: Python skills are appreciated.
  • Industry experience: Prior experience in transport, maritime or logistics would be a plus.
  • Personal qualities: Motivated, autonomous and proactive, with strong analytical and synthesis skills, a solid understanding of security logs, real ease working with management, business teams and technical teams, and absolute discretion on sensitive matters.

JOB ENVIRONMENT

  • Location: Marseille
  • From January 2027

Come along on CMA CGM's adventure