Security Operations Officer

**About Albea & the Product line that is recruiting**
Albéa is a world leader in beauty, personal care, oral care, pharmaceutical and food packaging. Albéa Gennevilliers is home to our global headquarters.

**Scope**
It is key to understand that the SecOps Officer:

- Mostly deals with IT Security, and prioritizes his/her activity on risk to Albéa’s business
- Is the pivot person distributing Security related topics and issues to the relevant stakeholders and making sure they are properly addressed according to the related business priorities/risks.

As such the SecOps Officer:

- Deals with a large variety of topics and solutions and works in close collaboration with a large number and variety of IT people (at Group and local IS levels, internal or external, including 3rd parties).
- is able to get sufficient knowledge and understanding on various topics to constructively interact with the various people he/she deals with
- Gets things done by coordinating different stakeholders to address security non-compliances or security incidents

**Main activities**
At operational level, the SecOps Officer deals with the following topics:

- _Daily requests:_
- Analyze phishing notifications and take relevant actions
- Analyze and validate security related requests (e.g. whitelisting requests, account creation on security tools)
- _Security alerts & incidents:_
- Analyze alerts received from the various managed services of Security solutions in place at Albéa (EDR, SOC, CTI )
- Escalate critical incidents to the Albéa CISO
- When required ensure the Security Incident Process is triggered and delivered
- Configure Firewall, Intrusion Detection Systems (IDS), Internal Vulnerability Scanners and Security Information and Event Management (SIEM) tools
- Monitoring & identification of IT security gaps (non-compliances):

- Produce KPIs related to IT Security
- Analyze KPIs to identify possible IT security gaps
- Prioritize security gaps (risk score based) & allocate them to the relevant owners
- Monitoring of Security Action plans:

- Support security gaps owners in identifying action plans (for mitigation and/or remediation of the security gaps)
- Monitor security action plans are delivered - when required guide them in delivering the action plan - and validate that deliverables effectively address the security gaps
- Projects:

- Participate to Security Projects (e.g. anti-phishing tool implementation, SIEM/SOC extension)
- Represent Information Security in projects to ensure security operations topics are identified and properly addressed
- Participate to information security awareness (IT and Business audiences)
- “Security Watch”: monitor various information security related channels to identify new trends or threats which might be relevant to Albéa.
- Produce reporting and present it to the CISO (activities, risks, progress, areas of attentions) - escalate when required.
- Propose enhancements / improvements or new ideas on process and tools in place.

**Accountability including KPIs**
Interpersonal Skills
- Organizational:

- Work in a self-driven mode
- Identify priorities and work accordingly (multitasking)
- Report to the CISO on what is important
- Work under stress (e.g. during security incidents)
- Team work (with Albéa Security Team and local IS teams, with internal teams and 3rd parties / partners):

- Build and maintain trust-based long-term relationship
- Understand and take into account constraints of other stakeholders
- Work as a team to deliver shared objectives
- Challenge in a constructive manner
- Share information and knowledge
- Communication:

- Adapt communication to the targeted audience
- Communicate in a clear and concise manner
- Fluent in English (spoken and written)
- Curious: have a strong ability to learn and share new ideas
- Results oriented: deliver and drive other people to deliver on due time, according to priorities
- Pro-activity: identify and propose enhancements/improvements to existing processes, procedures, solutions, tools.
- Adaptability: understand and adapt to multi-cultural organizations and diversity.

**Profile (Experience & qualifications)**
- Minimum 5 years in IT Security, including 1 year in a similar position
- Having worked in a global environment with an organization similar to Albéa’s would be a plus
- Having already worked as part of SOC and having dealt with security incidents would be a plus.
- Familiar with CTF and cybersecurity learning platform (TryHackme, HacktheBox)