Overview
We are expanding our Cybersecurity Infrastructure team to work on a critical service for an international agency. You can join us in Madrid, Valladolid, Seville, Barcelona, Valencia or Zaragoza, before being assigned to Paris.
We’ll get to the point; we’ll tell you what’s not on the web. If you want to know more about GMV, please contact us.
What challenge will you be taking on?
As a member of our team, you will oversee the SIEM security systems for one of our key clients, ensuring the tools operate under optimal conditions. Your goal will be to improve the performance of the SIEM every week by reducing false positives, improving detection, ensuring data is parsed correctly, optimizing integration, and improving reporting.
Your daily tasks will consist of:
- Engineering security monitoring tools
- Managing and optimizing correlation rules
- Identifying and implementing improvements to the SIEM platform
- Managing configuration changes
- Identifying and developing SIEM use cases
- Developing collectors and connectors
- Participating in security committees
- Developing and improving procedures and playbooks
- Producing performance reports and contributing to the continuous improvement of the service
- Liaising with SIEM manufacturers regarding upgrades, the roadmap and best practices
What do we need in our team?
For this position, we are looking for graduates with experience in SIEM solutions who are willing to work onsite at our client’s offices in Paris.
You must have a solid foundation in Linux systems, networks, and log management.
We value certifications in SIEM solutions (QRadar/Splunk/Sentinel/ArcSight), Security+, or CISSP, as well as experience in SOAR, automation, and scripting (Python/PowerShell).
What do we offer?
Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.
Versátil start and finish times, and intensive working hours Fridays and in summer.