> Markdown version of [/jobs/ext/1436118-senior-secops-soc-h-f](https://www.wearedevelopers.com/jobs/ext/1436118-senior-secops-soc-h-f). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Secops - Soc H/F - **Company:** Top Service - **Location:** Brest, France - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Confluence, JIRA, Cyber Security, Github, Identity and Access Management, Network Security, Security Information and Event Management, Software Vulnerability Management, Datadog, Circleci, Google Cloud, Cloud Platform System, Okta, Mitre Att&ck, Containerization, Kubernetes, Cloudflare, Terraform, Vulnerability Analysis - **Published:** July 25, 2026 - **Apply:** https://www.hellowork.com/fr-fr/emplois/81684334.html ## About the Role Strong experience in SOC / Security Operations (L2 / L3 level) - Hands-on experience with SIEM tools (Google SecOps is a strong plus) - Solid experience in alert triage and incident response - Experience working with runbooks and operational processes - Ability to quickly understand context and navigate complex environments - Comfortable working in high-paced, scale-up environments - Good understanding of cloud environments (GCP or AWS) - Strong communication skills and ability to coordinate across teams - Fluent English required Nice to Have - Experience with vulnerability management tools - Familiarity with MITRE ATT&CK - Previous experience in high-growth / international environments, postgraduate degree EducationalOccupationalCredential bachelor degree EducationalOccupationalCredential associate degree FULL_TIME no requirements Organization Top Profil ## Description We are supporting a fast-growing tech company operating at scale, with strong security and reliability requirements. The Security Operations team is responsible for maintaining the security posture of the platform, with a strong focus on monitoring, alert triage, and incident response in a cloud-native environment. The goal of this role is to take ownership of day-to-day security operations, allowing the rest of the team to focus on more complex engineering and security initiatives. This is a hands-on, operational role, requiring strong execution and the ability to quickly understand context and systems. Mission The consultant will join the Security Operations team and focus on run activities and SOC operations. Security Monitoring & Alert Triage - Monitor security tools and dashboards to detect suspicious activity - Triage alerts from SIEM (Google SecOps), EDR, and internal systems - Investigate alerts using existing runbooks and playbooks - Escalate issues to the appropriate teams when needed - Improve alert quality (reduce noise, fix misconfigurations) Incident Response - Handle and prioritize security incidents based on severity and business impact - Perform initial investigations and root cause analysis - Coordinate with engineering and infrastructure teams for resolution - Document incidents and actions clearly Vulnerability Triage - Analyze outputs from vulnerability scanning tools - Assess severity and business impact of vulnerabilities - Follow up with relevant teams to ensure remediation Security Operations Support - Act as a security point of contact during working hours - Respond to internal requests (Slack, tickets, alerts) - Route topics to the right stakeholders when needed - Contribute to maintaining clear and usable documentation Tech Environment - Cloud: GCP (primary), AWS - Security: Google SecOps (SIEM), Wiz, Adaptive Shield, Trufflehog - Infrastructure: Kubernetes, Terraform - Observability: Datadog - Identity & Access: Okta - Edge Security: Cloudflare, Zscaler - DevOps: GitHub, CircleCI - Collaboration: Jira, Confluence ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) ## Related Articles - [Best Companies to Work For in Paris: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/190-best-companies-to-work-for-in-paris-top-25-companies-in-2023) - [Best Companies to Work For in France: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/189-best-companies-to-work-for-in-france-top-25-companies-in-2023) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)