SOC Analyst

EQUANS

Equans is a world leader in the energy and services sector, with annual revenues of nearly €19,2 billion* and almost 800,000 projects.

Equans has leading positions in Europe, which is the result of the history of energy construction in these countries, and strong presences in North and South America and in Oceania.

With nearly 90,000 highly skilled employees, Equans has a strong geographic footprint, anchored by historic local brands. Equans provides its customers with excellent technical expertise in the design, installation, maintenance, and operation of multi-technical facilities. This know-how is based on key skills. First of all, in electrical and thermal engineering - two strong points that help accelerate the reduction of our clients' carbon footprint - but also in ventilation, refrigeration, mechanics and robotics, fire protection, energy renovation, digital solutions, IT, cyber security and telecommunications.

The combination of this expertise allows us to offer efficient and optimized solutions at all stages of the energy chain, from production, storage, and transport to usage.

(*) Turnover 2024 consolidated

SOC Analyst (F/M)

Summary of the role

As part of the Equans CSIRT, you will be responsible for the initial detection, preliminary assessment, and response to IT security incidents.

You will analyze the attackers' modus operandi and assess the extent of compromise. By examining the technical data collected, you will identify the attackers' modus operandi, determine their objectives, and assess the extent of the attacks.

By means of an investigation report, you will propose recommendations for remedying the problems and strengthening the security of the systems affected. You will suggest actions to be taken to counteract and resolve the incident, in particular by cleaning up and reinforcing the security of the systems affected.

You carry out constant monitoring of new vulnerabilities, emerging technologies, and attack methods related to the components of the information system, by developing appropriate investigation tools.

Key Responsibilities

Threat detection

• Identify, analyze and qualify security events in real time
• Assess the seriousness of security incidents
• Notify security incidents, elevate if necessary

Reacting to threats

• Transmit action plans to the entities in charge of processing and provide support regarding the corrective or palliative measures to be implemented
• Make recommendations on immediate measures
• Supporting the investigation teams in dealing with incidents

Implementing uses and tools

• Help set up the detection service (SIEM, etc.)
• Helping to define the strategy for collecting event logs
• Participating in the development and maintenance of event correlation rules
• Conduct market analysis and evaluate new solutions through Proof of Concepts

Monitoring and improvement

• Contributing to the continuous improvement of procedures; developing procedures for new types of incidents
• Contribute to ongoing monitoring of threats, vulnerabilities and attack methods to enhance event correlation rules.

Reporting and documentation

• Compiling dashboards reporting on operational activity
• Keeping documentation up to date
• Threat hunting activities

In conjunction with Equans internal and partner teams:

• Inform management of suspected cyber incidents and explain the history, status and potential impact of the event;
• Advise on disaster recovery, contingency and business continuity plans at tactical, operational and strategic levels;
• Recommend measures for circumventing and remediating the incident.

Profile

Academic background & Experience

Candidates should hold a Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field, with equivalent certifications like GIAC Certified Incident Handler (GCIH), Certified Incident Handler (ECIH), or CompTIA Security+ considered as alternatives. A strong foundation in cybersecurity principles, including threat intelligence, network security, and incident management, is essential.

Professionally, applicants need at least 3-5 years of hands-on experience in cybersecurity operations, ideally in a Security Operations Center (SOC) or incident response team.

Behavioral Capabilities

• Strong leadership skills, with the ability to guide and mentor a team of IGA professionals.
• Excellent problem-solving and analytical skills, with the ability to troubleshoot complex access governance issues and implement effective solutions.
• Ability to communicate effectively with both technical and non-technical