Security Operations Center Expert
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Lenstra was founded by passionate computer science engineers with a proven track record of delivering high-quality solutions. By combining technical excellence with a strong vision, we support top-tier clients across industries such as Banking & Insurance, Luxury, and Technology.Our expertise is structured around four core pillars: Software Development, DevSecOps, Data & AI, and Product. Through a holistic understanding of our clients’ environments, we help them address their most complex challenges—from building robust software and secure cloud platforms to designing data-driven solutions that accelerate business impact.
About the role
We are looking for a SOC Expert to detect, investigate, and respond to security threats across a global infrastructure. You will lead day-to-day incident response, improve detection coverage and quality, and develop SOAR automation to reduce response time and operational workload. You will also act as a key contact for user-reported security concerns and collaborate closely with Infrastructure and Operations teams to strengthen overall security posture and improve KPIs such as MTTD and MTTR.
The successful candidates will manage:
- Incident Response & Case ManagementTriage, investigate, and resolve security incidents within SLA.
- Coordinate containment, eradication, and recovery efforts.
- Handle user-reported security issues and escalte when necessary.
- Maintain clear documentation in case management systems.
- Detection EngineeringDevelop and tune SIEM detection rules to improve coverage and reduce false positives.
- Integrate new log sources and enhance monitoring visibility.
- Map detections and investigations to the MITRE ATT&CK framework.
- Build dashboards and reports to track SOC performance and risk.
- SOAR & AutomationDesign and implement automated playbooks (e.g., endpoint isolation, IP blocking, account disabling).
- Integrate security tools to streamline response workflows.
- SOC Tooling & Platform OperationsMaintain and optimize SIEM, SOAR, and related security platforms.
- Perform updates, health checks, and configuration improvements.
Requirements:
- Degree in Computer Science, Cybersecurity, or related field.
- 5+ years of SOC experience in high-volume, SLA-driven environments.
- Strong expertise in SIEM (rule creation, tuning, dashboards) and SOAR automation.
- Experience in detection engineering, log analysis, and false-positive reduction.
- AWS experience required; Azure is a plus.
- Experience mapping detections to MITRE ATT&CK.
- Scripting skills: Python, Bash, PowerShell.
- Strong knowledge of networking protocols (TCP/IP, DNS, HTTP/S, SSL/TLS, firewalls).
- Proficiency in Linux and Windows environments.
- Experience with CI/CD and Git-based workflows.
- Certifications such as CISSP, GCIA, GCIH, CEH, and/or SIEM/SOAR preferred.
- Fluent in English and French.
Location:
This job is based in Paris, on a hybrid set-up (3 days onsite, 2 days at home).
Our recruitment process consists in 3 interviews:30 minutes recruiter screen1h role and cultural fit interview1h Dive Deep interview