Internship SOC ANALYST

Il y a 2 jours

Marseille, Provence-Alpes-Côte d'Azur, France CMA CGM Temps plein 42 000 € - 66 000 € Contrat

Your main mission will be to protect the CMA CGM Group by detecting and responding to cyber incidents. In a context where threats are growing in number and complexity, you will have the opportunity to work within a dynamic, motivated team equipped with high-level security solutions. You will report to the SOC Manager.

WHAT WILL YOU DO?

24/7 operational monitoring: You will take part in a 24/7 operational SOC, working in rotation (Following the Sun).

Analysis and detection: You will analyze,contextualizeandmonitorsecurity alerts from advanced platforms.

Investigation and escalation: You will investigate security events, communicatefindingsand escalatete incidents according to procedures.

Stakeholder support: You will handle security service requests (responding to subsidiaries/stakeholders, analyzing malicious or suspicious files).

Incident response: You will support incident response (IR) whenever analysis confirms an actionable incident.

Threat hunting: You will take part in Threat Hunting exercises and sessions with the CTI (Cyber Threat Intelligence) team.

Continuous improvement: You willoptimizeSOC use cases (detection rule tuning) and contribute to designing and improving playbooks, standard operating procedures (SOPs)and guidelines.

Simulations and collaboration: You will take part in incident response simulations and work closely with the SOC RUN Manager, theLeadand the Manager on various tasks and projects.

WHO ARE WE LOOKING FOR?

Education: Master's degree in Computer Science, Cybersecurity, Networks or a related field.

SOC tools:Proficiencywith SIEM, SOAR, as well as network/host logs, firewalls, IPS/IDSand email security gateways.

Technical knowledge: Solid understanding of cybersecurity principles and best practices, attack methodologies (Cyber Kill Chain, MITRE ATT&CK), common attack vectors, and concepts such as perimeter defense, endpointmanagementand data loss prevention (DLP).

Programming: Python skills are appreciated.

Industry experience: Prior experience in transport,maritimeorlogisticswould be a plus.

Personal qualities: Motivated,autonomousand proactive, with strong analytical and synthesis skills, a solid understanding of security logs, real ease working with management, business teams and technical teams, and absolute discretion on sensitive matters.