CSIRT Senior Analyst

L'Oréal; Saint-Ouen-sur-Morin; On-site; EUR 85,000 - 120,000; Full time

Job summary

L’Oréal is seeking a Senior Analyst for its CSIRT to manage complex security incidents and lead RUN operations across security projects. You will act as SME for EDR services and drive improvements in Detection & Response alongside global teams.

Ideal candidates bring experience in incident analysis, cloud security, and automation, with strong writing and communication skills to coordinate across security and IT functions.

Qualifications

• Proven experience in security incident analysis across workstation, server, and directory environments.
• Autonomous, rigorous, with strong writing and communication skills.
• Experience in creating detection rules and automation.
• Knowledge of Cloud technologies and infrastructure security.
• Proficiency in one or more scripting languages.

Responsibilities

• Manage Level 3 incidents escalated by MSSPs.
• Technical Lead for RUN operations on security projects/tools.
• Technical SME for EDR services.
• RUN Referent for the continuous improvement of Detection & Response activities.
• Support the development of existing service lines (EDR, Threat Hunting, Purple Team).
• Contribute to the development of the Detection and Response strategy.

Skills

Incident analysis

Autonomous work style

Writing & communication

Automation & rules

Scripting languages

Tools

EDR tools

Cloud security tools

Job description

Your Future Team

The Cyber Security Incident Response Team (CSIRT), currently composed of 12 analysts operating in an international environment, is looking for its future Senior Analyst!

As part of the Cyber Defense Center department, the CSIRT works in close collaboration with the SOC, VOC, AppSec, and Offensive security Teams.

About the Role:

This position is open to candidates with proven experience in managing cybersecurity incidents and alerts. The operational supervision of cybersecurity solutions also plays a key role in the team's daily activities.

What a day in the life in the team looks like:

In this strategic role, your success will be built on:

• Management of Level 3 incidents escalated by MSSPs


• Technical Lead for RUN operations on one or several security projects/tools


• Technical Subject Matter Expert (SME) for EDR services


• RUN Referent for the continuous improvement of \"Detection & Response\" activities


• Supporting the development of existing service lines (EDR, Threat Hunting, Purple Team)


• Contributing to the development of the Detection and Response strategy

What You'll Need To Succeed:

First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.

Secondly, in this specific position, it will be important for you to have:

• Proven experience in security incident analysis (conducting in-depth security investigations across workstation, server, and corporate directory environments, both on-premises and in the cloud)


• Autonomous, rigorous, with strong writing and communication skills.

Additional Skills That Will Set You Apart:

• Experience in creating detection rules and automation


• Knowledge of Cloud technologies and infrastructure security


• Proficiency in one or more scripting languages.