Security Operations

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS
• Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation
• Support incident response, remediation, and recovery activities
• Work closely with Incident Response and other cybersecurity teams to manage security threats
• Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data
• Identify opportunities to improve detection quality and reduce false positives through tuning and optimization
• Gather technical information from clients to improve security monitoring and detection
• Prepare and present security reports, summaries, and technical findings
• Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes
• Review operational feedback and implement corrective actions to continuously improve service quality

Security Operations Analyst – Cyber Defense Operations

• Act as a central point of contact for alert triage, incident identification and security event investigation across EPI environments
• Execute incident response activities using structured frameworks such as SANS PICERL
• Conduct proactive, hypothesis-driven threat hunts based on attacker behaviour, emerging threats, threat intelligence and MITRE ATT&CK techniques
• Parse, analyse and correlate logs from authentication, application, system, endpoint and cloud telemetry sources, including AWS and Azure
• Design, tune and maintain detection rules, use cases, dashboards, custom alerts and automation workflows
• Contribute to SOC playbooks, runbooks, SIEM and EDR integrations
• Document and communicate threat findings, incident outcomes and remediation recommendations
• Collaborate with engineering, SOC, IR and IT teams to improve detection coverage, response readiness and operational resilience

Security Operations Engineer

• Coordinate multiple security events, including alarms, visitors, and couriers
• Lead initial incident management
• Supervise and actively participate in day-to-day activities during shifts
• Provide customer service and support
• Respond to escalations and support requests
• Assist with appropriate certifications and inspections of the Security Operations Centre
• Monitor and track metrics and KPIs for regular review
• Work effectively in a professional, friendly manner with a diverse team
• Adhere to policies and procedures
• Contribute to a high-performing, friendly work environment

Global Security Operations Centre – Technical Operator

• Lead the SOC: SIEM monitoring, alert triage, and escalation
• Conduct or oversee forensic investigations, including compromise analysis and evidence collection
• Maintain and improve incident response playbooks
• Lead the vulnerability management process: scanning, prioritization, and remediation tracking
• Manage patch management in coordination with IT/infrastructure teams
• Maintain an MCS dashboard with coverage and compliance KPIs
• Administer and harden Microsoft Entra ID (Azure AD): Conditional Access, PIM, MFA, and access policies
• Lead identity governance: access reviews, lifecycle management, and least-privilege access
• Monitor Entra ID logs and detect anomalous behavior
• Manage SSO/SCIM integrations with SaaS applications
• Administer CrowdStrike Falcon EDR/XDR, tune detection policies, and conduct endpoint hunting
• Manage Cloudflare: WAF, DDoS protection, ZTNA, and DNS security
• Administer other SaaS security tools, including cloud SIEM, email security, and DLP

Lead SecOps

• Analyze, qualify, and prioritize cybersecurity events
• Investigate incidents, including log correlation, network analysis, and OT contextualization
• Apply SOC procedures, runbooks, and playbooks
• Escalate incidents in a structured manner and track them through to resolution
• Contribute to service continuity and the operational maintenance of the SOC
• Participate in producing reports, KPIs, and operational documentation
• Monitor security alerts in real time using SOC tools

SOC Analyst Internship

• Analyze, classify, and prioritize cybersecurity events
• Investigate incidents through log correlation, network analysis, and OT contextualization
• Apply SOC procedures, runbooks, and playbooks
• Escalate incidents in a structured manner and track them through to resolution
• Contribute to service continuity and maintaining the SOC in operational condition
• Participate in the production of reports, KPIs, and operational documentation
• Monitor security alerts in real time using SOC tools

SOC Analyst – Internship

• Analyze, qualify, and prioritize cybersecurity events
• Investigate incidents through log correlation, network analysis, and OT contextualization
• Apply SOC procedures, runbooks, and playbooks
• Escalate incidents in a structured manner and track them through resolution
• Contribute to service continuity and the SOC’s operational readiness
• Participate in the preparation of reports, KPIs, and operational documentation
• Monitor security alerts in real time using SOC tools

• Manage the SIEM solution to analyze logs and detect anomalous behavior
• Manage the SOAR platform for enrichment, analysis, monitoring, and automation
• Contribute to building the SOC layers: SIEM, log integration, parsing, and playbooks
• Regularly monitor new attacks and update use cases accordingly
• Contribute to developing new use cases
• Analyze security incidents through Level 3 (L3)
• Participate in cyber crisis management
• Contribute to threat hunting activities
• Advise and support clients on a day-to-day basis
• Collaborate with the Montreal and Kuala Lumpur offices as part of a follow-the-sun operating model

Security Operations jobs in France

Security Operations Analyst – Cyber Defense Operations

Security Operations Engineer

Global Security Operations Centre – Technical Operator

Lead SecOps

SOC Analyst Internship

SOC Analyst – Internship

SOC Analyst – Internship

Senior SOC Analyst – Permanent Contract