CSIRT Manager – Paris

Tiime

. Lead and coordinate security incident detection, analysis, and response activities .

Posted 11/3/2026full-timeParis • FranceMid-LevelSenior💰 €65,000 - €80,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading security incident detection, analysis, and response programs, with a strong focus on compliance with NIS2, DORA, ISO 27001, and GDPR. Proficient in managing service providers and optimizing program effectiveness through strategic oversight and continuous improvement.

Highest-signal resume keywords

Cybersecurity ExperienceIncident Response ManagementDetection Technologies ProficiencyService Provider ManagementCompliance Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationForensicsLog AnalysisMalware AnalysisAttack Techniques KnowledgeSOC OperationsKPI MonitoringUse Case DevelopmentCrisis ManagementBudget Management

Soft Skills

DiplomacyNegotiation SkillsComposureDecision-MakingOrganizational Skills

Tools & Technologies

SIEMEDR/XDRSOARNDRCloud Environments

Industry Keywords

MITRE ATT&CKCyber Crisis ManagementMSSPManaged ServicesContinuous Improvement

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead and coordinate security incident detection, analysis, and response activities
Ensure the operational effectiveness of the program and drive its maturity and scope
Develop and lead the end-to-end evolution of the detection, analysis, and incident response program
Define the coverage scope and ensure it is complete and aligned with business needs
Define, prioritize, and evolve detection use cases
Document the necessary context to reduce false positives
Oversee alert monitoring, triage, and analysis
Coordinate security incident management from qualification through closure, including lessons learned
Coordinate major incidents with IT, business teams, communications, and legal
Organize purple team exercises, attack simulations, end-to-end testing, and BCP/DRP tests
Participate in the Cyber Crisis Management Team
Manage the MSSP contract and relationship
Lead service review committees and monitor improvement plans
Challenge service quality and contribute to RFPs and reversibility scenarios
Manage the program budget and optimize the cost/value ratio
Define and monitor SOC KPIs and KRIs
Produce dashboards for the CISO, executive management, and governance bodies
Ensure compliance with NIS2, DORA, ISO 27001, and GDPR
Prepare for and support audits relating to the program

Requirements

What you’ll need

Education: Master’s degree (engineering school, Master’s in cybersecurity or computer science) or equivalent experience
5–7 years of experience in cybersecurity, including at least 3 years in a SOC, CERT, or incident response role
Experience managing service providers (MSSP, MDR, managed services) or service contracts is a major advantage
Strong knowledge of attack techniques, MITRE ATT&CK, and incident investigation and response processes (forensics, log analysis, malware analysis)
Proficiency with detection technologies: SIEM, EDR/XDR, SOAR, NDR
Understanding of cloud environments (Azure, AWS, GCP), networks, and systems
Ability to deliver results without direct managerial authority over MSSP operators
Strong diplomacy and negotiation skills, with constructive firmness when dealing with service providers
Composure and sound decision-making in crisis situations
Clear communication with both technical and non-technical stakeholders
Thoroughness, strong organizational skills, and a continuous improvement mindset

Benefits

Comp & perks

€10 meal voucher provided via a Swile card, with 50% employer contribution
Profit-sharing bonus
50% reimbursement of public transport subscriptions
Sustainable mobility allowance for bicycle or scooter commuting
Access to an exclusive discounts platform
Company culture focused on employee well-being
Additional days off
Flexible working hours
Several remote-working days
Attractive offices in the heart of Paris (Paris 9th arrondissement)