Senior Secops - Soc H/F

Top Service
Brest, France
17 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Languages
English

Tech stack

Amazon Web Services Confluence JIRA Cyber Security Github Identity and Access Management Network Security Security Information and Event Management Software Vulnerability Management Datadog Circleci Google Cloud
+8 more
Cloud Platform System Okta Mitre Att&ck Containerization Kubernetes Cloudflare Terraform Vulnerability Analysis

Job description

We are supporting a fast-growing tech company operating at scale, with strong security and reliability requirements.

The Security Operations team is responsible for maintaining the security posture of the platform, with a strong focus on monitoring, alert triage, and incident response in a cloud-native environment.

The goal of this role is to take ownership of day-to-day security operations, allowing the rest of the team to focus on more complex engineering and security initiatives.

This is a hands-on, operational role, requiring strong execution and the ability to quickly understand context and systems.

Mission

The consultant will join the Security Operations team and focus on run activities and SOC operations.

Security Monitoring & Alert Triage

  • Monitor security tools and dashboards to detect suspicious activity
  • Triage alerts from SIEM (Google SecOps), EDR, and internal systems
  • Investigate alerts using existing runbooks and playbooks
  • Escalate issues to the appropriate teams when needed
  • Improve alert quality (reduce noise, fix misconfigurations)

Incident Response

  • Handle and prioritize security incidents based on severity and business impact
  • Perform initial investigations and root cause analysis
  • Coordinate with engineering and infrastructure teams for resolution
  • Document incidents and actions clearly

Vulnerability Triage

  • Analyze outputs from vulnerability scanning tools
  • Assess severity and business impact of vulnerabilities
  • Follow up with relevant teams to ensure remediation

Security Operations Support

  • Act as a security point of contact during working hours
  • Respond to internal requests (Slack, tickets, alerts)
  • Route topics to the right stakeholders when needed
  • Contribute to maintaining clear and usable documentation

Tech Environment

  • Cloud: GCP (primary), AWS
  • Security: Google SecOps (SIEM), Wiz, Adaptive Shield, Trufflehog
  • Infrastructure: Kubernetes, Terraform
  • Observability: Datadog
  • Identity & Access: Okta
  • Edge Security: Cloudflare, Zscaler
  • DevOps: GitHub, CircleCI
  • Collaboration: Jira, Confluence

Requirements

Strong experience in SOC / Security Operations (L2 / L3 level)

  • Hands-on experience with SIEM tools (Google SecOps is a strong plus)
  • Solid experience in alert triage and incident response
  • Experience working with runbooks and operational processes
  • Ability to quickly understand context and navigate complex environments
  • Comfortable working in high-paced, scale-up environments
  • Good understanding of cloud environments (GCP or AWS)
  • Strong communication skills and ability to coordinate across teams
  • Fluent English required

Nice to Have

  • Experience with vulnerability management tools
  • Familiarity with MITRE ATT&CK
  • Previous experience in high-growth / international environments, postgraduate degree EducationalOccupationalCredential bachelor degree EducationalOccupationalCredential associate degree

FULL_TIME

no requirements

Organization Top Profil

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.hellowork.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

6:36 min

Funding open source through GitHub Accelerator and Sponsors

Stormy Peters · WWC 2023

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

3:05 min

Integrating an assistant application with Jira software

Felix Augenstein · LIVE

2:40 min

Using GitHub primitives for internal documentation and corporate operations

Kyle Daigle · Coffee With Developers

4:37 min

Architecting single sign-on flows across multiple application domains

Gift Egwuenu · WWC 2023

Videos

See all

Related articles

See all