CSIRT Senior Analyst
Il y a 3 jours
SaintOuen, Centre-Val de Loire, France
L'Oréal
Temps plein
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Your Future Team
The Cyber Security Incident Response Team (CSIRT), currently composed of 12 analysts operating in an international environment, is looking for its future Senior Analyst
As part of the Cyber Defense Center department, the CSIRT works in close collaboration with the SOC, VOC, AppSec, and Offensive security Teams.
About the Role
This position is open to candidates with proven experience in managing cybersecurity incidents and alerts. The operational supervision of cybersecurity solutions also plays a key role in the team's daily activities. What a day in the life in the team looks like: In this strategic role, your success will be built on:
• Management of Level 3 incidents escalated by MSSPs
• Technical Lead for RUN operations on one or several security projects/tools
• Technical Subject Matter Expert (SME) for EDR services
• RUN Referent for the continuous improvement of "Detection & Response" activities
• Supporting the development of existing service lines (EDR, Threat Hunting, Purple Team)
• Contributing to the development of the Detection and Response strategy
What You'll Need
To Succeed First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit. Secondly, in this specific position, it will be important for you to have:
• Proven experience in security incident analysis (conducting in-depth security investigations across workstation, server, and corporate directory environments, both on-premises and in the cloud)
• Autonomous, rigorous, with strong writing and communication skills. Additional Skills That Will Set You Apart
• Experience in creating detection rules and automation
• Knowledge of Cloud technologies and infrastructure security
• Proficiency in one or more scripting languages.
About the Role
This position is open to candidates with proven experience in managing cybersecurity incidents and alerts. The operational supervision of cybersecurity solutions also plays a key role in the team's daily activities. What a day in the life in the team looks like: In this strategic role, your success will be built on:
• Management of Level 3 incidents escalated by MSSPs
• Technical Lead for RUN operations on one or several security projects/tools
• Technical Subject Matter Expert (SME) for EDR services
• RUN Referent for the continuous improvement of "Detection & Response" activities
• Supporting the development of existing service lines (EDR, Threat Hunting, Purple Team)
• Contributing to the development of the Detection and Response strategy
What You'll Need
To Succeed First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit. Secondly, in this specific position, it will be important for you to have:
• Proven experience in security incident analysis (conducting in-depth security investigations across workstation, server, and corporate directory environments, both on-premises and in the cloud)
• Autonomous, rigorous, with strong writing and communication skills. Additional Skills That Will Set You Apart
• Experience in creating detection rules and automation
• Knowledge of Cloud technologies and infrastructure security
• Proficiency in one or more scripting languages.