Defensive Cyber Security Engineer (M/F)

Cloud Temple is offering you the opportunity to join its teams as a Defensive Cybersecurity Engineer, working on two SIEM families:

• SIEM collecting sources internal to the Cloud Temple IS
• SIEM collecting sources from Cloud Temple customers' information systems

Mission statement:

The Senior Cybersecurity Engineer's role within our Security Operations Centre (SOC) will be to guarantee the security of our information systems through rigorous and proactive management of security incidents, as well as the continuous improvement of security processes.

Handling security alerts and incidents

• Alert investigation: conducting in-depth investigations into alerts raised by our security information and event management (SIEM) tools.
• Management of reported incidents: examining alerts raised by employees or customers, and qualifying these alerts to determine their nature and seriousness.
• Communication: effective communication with internal teams and customers will be essential, particularly in the context of investigations and governance (participation in committees). The Senior Cyber Security Engineer will also be one of the potential points of contact with CERT in the event of a cyber crisis.
• Ticket management in compliance with established SLAs to guarantee fast and efficient resolution.

Continuous improvement

• Adaptation of detection rules to improve the responsiveness and effectiveness of our SOC in the face of new threats.
• Taking current threats into account: interfacing with Cyber Threat Intelligence services, integrating emerging threats into our detection strategy.
• Technology watch: constant monitoring of new technologies and trends in cybersecurity to ensure that our SOC remains at the cutting edge of innovation.
• Documentation: processes, procedures, technical sheets, etc.
• Improving processes to increase the operational efficiency of the SOC.

Projects

• Integration of new collection sources to enhance detection capacity.
• Integration of new customers who have subscribed to the SOC service.
• Automation, particularly for enrichment and incident response, to maximise the efficiency and responsiveness of the SOC.

This position does not involve managerial responsibilities

Skills required:

• Graduate of an engineering school or equivalent (5 years' higher education).
• At least 3 years in systems and network engineering.
• Ideally: 1 year in a SOC.

Technical knowledge:

Defensive security :

• SIEM (basic principles, ideally knowledge of Microsoft Sentinel and Graylog)
• Appreciated certifications: Microsoft SC-200 (Microsoft Security Operations Analyst)
• Azure Administrator Associate

Basic base :

• Windows and Linux operating systems
• Azure
• Powershell
• Terraform
• Git

Knowledge of languages:

• English: full professional capability

Expected skills :

This position requires a very good overall IT security culture, an aptitude for teamwork and a high level of rigour in complying with security processes.

To be successful in their role, defensive cybersecurity engineers must undergo continuous training. The main qualities of the Defensive Cyber Security Engineer are as follows:

• Agility : Adaptability to changes in the professional context.
• Autonomy: Able to work on the design and implementation of its missions, putting its knowledge and know-how into practice.
• Analytical skills: Able to structure and process qualitative and quantitative data and draw meaningful conclusions. Understand customer issues so you can make the right decisions quickly.
• Listening skills : Able to understand and identify customer issues and respond to them.
• Communication : At ease with oral and written communication in all its forms.
• Commitment/work ethic: A positive state of mind in relation to the company, with concern for its image and a feeling of belonging. The individual feels involved, co-responsible for collective results and compliance with verbal and written agreements, throughout the life cycle of the contract.
• Enthusiasm: Shows passion and enthusiasm for the job. Has a winning attitude.
• Honesty/Integrity: Does not compromise company ethics. Promotes trust. Does what's right, not just what's politically expedient.
• Intelligence : Demonstrates an ability to understand and assimilate new information quickly and effectively.
• Proactive: Acts without being told what to do. Brings new ideas to the company.

Place of work :

• Hybrid
• Position open throughout France

Choose us for :

• Our leading position in a fast-growing sector.
• Support and coaching from experienced colleagues
• Our innovative organisation, which will enable you to progress within the Group
• Our technical and functional training systems
• Our collaborative events
• Our co-option and mobility scheme
• Our quality of working life programme (teleworking, employee services, CSR commitments, etc.)
• And always: profit-sharing, mutual insurance/health insurance, TR card, social and economic committee, RTT, etc.

If you're looking for a rewarding professional life, come and build your career at Cloud Temple!

Your passion, commitment and success will be valued

Cloud Temple is committed to promoting diversity. This position is open to disabled workers with equal skills.