CSIRT Senior Analyst

Your Future Team

The Cyber Security Incident Response Team (CSIRT), currently composed of 12 analysts operating in an international environment, is looking for its future Senior Analyst!

As part of the Cyber Defense Center department, the CSIRT works in close collaboration with the SOC, VOC, AppSec, and Offensive security Teams.

About the Role: This position is open to candidates with proven experience in managing cybersecurity incidents and alerts. The operational supervision of cybersecurity solutions also plays a key role in the team's daily activities.

What a day in the life in the team looks like:

In this strategic role, your success will be built on:

• Management of Level 3 incidents escalated by MSSPs
• Technical Lead for RUN operations on one or several security projects/tools
• Technical Subject Matter Expert (SME) for EDR services
• RUN Referent for the continuous improvement of "Detection & Response" activities
• Supporting the development of existing service lines (EDR, Threat Hunting, Purple Team)
• Contributing to the development of the Detection and Response strategy

What You'll Need To Succeed:  

First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit. 

Secondly, in this specific position, it will be important for you to have:
- Proven experience in security incident analysis (conducting in-depth security investigations across workstation, server, and corporate directory environments, both on-premises and in the cloud)
- Autonomous, rigorous, with strong writing and communication skills.

Additional Skills That Will Set You Apart:

- Experience in creating detection rules and automation
- Knowledge of Cloud technologies and infrastructure security
- Proficiency in one or more scripting languages.