Senior Consultant – Detection and Response, Cybersecurity, Île-de-France

Responsibilities

• ▹Assess detection coverage and make concrete recommendations to improve collection, use cases and overall SOC visibility
• ▹Produce analysis and strategy documents (collection map, evolution plan, MITRE ATT&CK matrix), often used as audit or optimisation references
• ▹Follow up corrective actions and mitigation plans from previous assessments
• ▹Work full time as a cybersecurity coordinator to increase understanding, responsiveness and synergy between the Detection, Response, Vulnerability and Identity teams
• ▹Facilitate escalations and action-plan follow-up, ensuring decisions are traceable and remediation is carried out
• ▹Translate functional and business needs into technical requirements understandable by SOC, IT and security teams
• ▹Act as a relay between the SOC/CERT teams (Detection & Response) and governance functions
• ▹Contribute to operational resilience, notably identity, access, vulnerabilities and crisis management
• ▹Help build methods and frameworks linking Vulnerability, Threat Intelligence, Investigation, Detection and Response (MITRE ATT&CK, SOC-CMM, etc.)
• ▹Make proposals in client workshops and guarantee the quality and timeliness of deliverables
• ▹Contribute to taking offers to market: define positioning and pricing, contribute to product communication and the internal training plan, support sales teams in pre- and post-sales phases

Requirements

• ▹Engineering school degree or equivalent
• ▹At least 4 years of experience in an equivalent role and good cybersecurity expertise
• ▹Command of the concepts around MITRE ATT&CK, vulnerability management, event correlation and coordinated remediation
• ▹Good understanding of SECOPS environments, particularly identity, access, vulnerability and resilience
• ▹Ability to define cyber use cases
• ▹Ability to steer continuous improvement actions
• ▹Prior experience in a SOC environment (analysis, coordination or steering)
• ▹Knowledge of one or more cyber technology environments: SOC platform (SIEM, SOAR), vulnerability management, CNAPP, etc.
• ▹Solid grasp of risk governance and cyber frameworks (NIST, MITRE, ISO 2700x)
• ▹Fluent English, written and spoken

Soft skills

What we offer

• ▹Remote work up to 2 days a week depending on assignments
• ▹Benefits package: health insurance, works council (CSE) perks, meal vouchers, profit-sharing agreement, holiday bonus and referral bonus
• ▹More than 30 job families and many career opportunities
• ▹Hundreds of trainings and self-paced platforms to prepare certifications
• ▹Opportunity to get involved with the company foundation or the partner Vendredi
• ▹Join the Tech'Me UP community (training, conferences, tech watch and more)

About the company

Sopra Steria is a major European tech player with 51,000 employees in nearly 30 countries, offering consulting, digital services and solutions that help clients with their digital transformation. Its cybersecurity business line has more than 2,500 experts in Europe (over half in France) and is also present in Toronto and Singapore.