As a member of our team, you will oversee the SIEM security systems for one of our key clients, ensuring the tools operate under optimal conditions. Your goal will be to improve the performance of the SIEM every week by reducing false positives, improving detection, ensuring data is parsed correctly, optimizing integration, and improving reporting.
Your daily tasks will consist of:
1. Engineering security monitoring tools
2. Managing and optimizing correlation rules
3. Identifying and implementing improvements to the SIEM platform
4. Managing configuration changes
5. Identifying and developing SIEM use cases
6. Developing collectors and connectors
7. Participating in security committees
8. Developing and improving procedures and playbooks
9. Producing performance reports and contributing to the continuous improvement of the service
10. Liaising with SIEM manufacturers regarding upgrades, the roadmap and best practices
WHAT DO WE NEED IN OUR TEAM?
For this position, we are looking for graduates with experience in SIEM solutions who are willing to work onsite at our client's offices in Paris.
You must have a solid foundation in Linux systems, networks, and log management.
We value certifications in SIEM solutions (QRadar/Splunk/Sentinel/ArcSight), Security+, or CISSP, as well as experience in SOAR, automation, and scripting (Python/PowerShell).
WHAT DO WE OFFER?
Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.
Flexible start and finish times, and intensive working hours Fridays and in summer.
Personalized career plan development, training and language learning support.
National and international mobility. Do you come from another country? We can offer you a relocation package.
Competitive compensation with ongoing reviews, flexible compensation and discount on brands.
Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!
️