SIEM Expert

Stack

Responsibilities

• ▹Manage complex incidents and client escalations to ensure quality client service
• ▹Provide level 2 and 3 support for incidents and user requests on the Splunk SIEM
• ▹Participate in on-call duty and scheduled operations outside business hours
• ▹Analyze and resolve complex incidents across the technologies in use (Linux, Syslog, IPsec, Splunk, XSOAR, Ansible, Terraform, Jenkins, Git, AWS, Azure, Grafana, Zabbix)
• ▹Organize the team's workload, managing priorities for continuous service improvement
• ▹Develop collection monitoring via Python scripting and Grafana reporting
• ▹Collaborate closely, internationally, with development, governance and vendor teams to escalate critical issues
• ▹Write procedures and related documentation
• ▹Report service KPIs during regular client review meetings
• ▹Produce activity and incident reports for the client
• ▹Support the team's skill development across the full scope of activities

Requirements

• ▹Master's degree (Bac+5), strong technical profile with experience in operational team leadership
• ▹Rigorous, autonomous and innovation-minded approach to security and development (DevOps/GitOps) topics
• ▹Practical experience with Python, documenting code, implementing unit tests and CI pipelines
• ▹Willingness to share knowledge and a collaborative working style
• ▹Good client-facing skills
• ▹Fluent English, written and spoken

Soft skills

About the company

Orange Cyberdefense is the Orange Group's strategic unit dedicated to digital security. It supports companies of all sizes, critical organizations, government bodies and local authorities in designing, implementing and operating their cybersecurity strategies. In 2025 it generated €1.3 billion in revenue, 7% growth, and employs more than 3,300 experts.