Senior CSIRT Analyst

L'Oréal; Saint-Ouen-sur-Seine; Hybride; EUR 70 000 - 95 000; Plein temps

Avantages offerts par ce poste

Hybrid work policy

VIP staff shop with product discounts

Company restaurant & gym

Transportation subsidy reimbursement

Employee discounts & social benefits

HR mobility and training programs

Résumé du poste

L'Oréal is seeking a Senior Analyst to join the Cyber Security Incident Response Team in the Paris area. You will manage complex security incidents escalated by MSSPs, provide technical leadership for RUN operations, and act as a SME for EDR services.

Based at the Beauty Tech HQ in Saint-Ouen, you will help shape the Detection & Response strategy, support evolving service lines, and collaborate across SOC, AppSec and Red Team in a multinational environment.

Qualifications

• Proven experience in security incident analysis and handling Level 3 incidents.
• Autonomous, rigorous, with strong writing and communication skills.
• Experience with EDR and cloud security concepts; able to lead security projects.

Responsabilités

• Manage Level 3 incidents escalated by MSSPs and supervise RUN operations.
• Serve as Technical SME for EDR services and drive detection & response improvements.
• Collaborate with SOC, AppSec and Red Team to evolve security services.

Connaissances

Incident analysis

MSSP escalation

EDR SME

Security governance

RUN operations leadership

Threat hunting

Scripting languages

Cloud security

Description du poste

Unleash Your Potential at L'Oréal's Beauty Tech!

For more than a century, L’Oréal has devoted itself solely to one business: Beauty. Present in 150 countries across five continents and with €42 billion consolidated sales, L'Oréal is the global industry leader. With 37 global beauty brands across four divisions, L'Oréal offers beauty for each covering all beauty categories and catering to all beauty desires. With the acquisition of the Australian brand Aēsop in 2023, the Group continues to expand its portfolio through targeted acquisitions as part of its drive to create the future of beauty.

Today, L’Oréal includes more than 2,000 tech positions and is constantly growing. Beauty Tech is changing the game and leading the shift towards new consumer realities and a digital disruption. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future.

Beauty Tech equips the Group with the key assets it needs to conquer this new world, where Tech has become strategic. With this ambition, L’Oréal continues to recruit diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.

YOUR FUTURE TEAM

The Cyber Security Incident Response Team (CSIRT), currently composed of 12 analysts operating in an international environment, is looking for its future Senior Analyst!

As part of the Cyber Defense Center department, the CSIRT works in close collaboration with the SOC, VOC, AppSec, and Red Team.

About the Role:

This position is open to candidates with proven experience in managing cybersecurity incidents and alerts. The operational supervision of cybersecurity solutions also plays a key role in the team's daily activities.

What a day in the life in the team looks like:

In this strategic role, your success will be built on:

• Management of Level 3 incidents escalated by MSSPs
• Technical Lead for RUN operations on one or several security projects/tools
• Technical Subject Matter Expert (SME) for EDR services
• RUN Referent for the continuous improvement of "Detection & Response" activities
• Supporting the development of existing service lines (EDR, Threat Hunting, Purple Team)
• Contributing to the development of the Detection and Response strategy

You will be based at our Beauty Tech Headquarters in Saint-Ouen (Paris area). This is a trendy, "L'Oréal-minded" tech hub where 2,000+ experts in Data, Architecture, and Infrastructure collaborate. It is a place designed for mobility, networking, and continuous skill development.

THIS IS WHAT YOU WILL NEED TO SUCCEED!

First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.

Secondly, in this specific position, it will be important for you to have:

• Proven experience in security incident analysis (conducting in-depth security investigations across workstation, server, and corporate directory environments, both on-premises and in the cloud)
• Autonomous, rigorous, with strong writing and communication skills

The Challenges Awaiting You

• Experience in creating detection rules and automation
• Knowledge of Cloud technologies and infrastructure security
• Proficiency in one or more scripting languages

LET US GIVE YOU 6 OTHER REASONS TO JOIN US!

Joining L'Oréal Means Joining a Company That

• Invests in Tech and positions its Tech teams at the heart of its digital transformation strategy.
• Allows its employees to have a real impact, to test their ideas, to innovate and to build our future.
• Offers a Hybrid Work Policy: 3 Days in Office, 2 Days Work from Home
• Provides many benefits: VIP staff shop offering our products at a preferential rate, a company restaurant & gym, 60% reimbursement of transportation subscription, a work council offering lots of employee discounts (social & cultural activities, holiday vouchers etc.) and much more!
• Delivers a powerful and innovative HR policy: dynamic mobility policy, significant investment in employee training, regular re-evaluation of remuneration, numerous innovative HR measures: Time Savings Account, paternity leave, Citizen Day, etc.
• Is an Equal Opportunity Employer and takes pride in a diverse environment. We would love to find out more about you as a candidate and we do not discriminate in recruitment, hiring, training, promotion, or other employment practices. The beauty we find in our differences gives us the freedom to go beyond. That’s the beauty of L’Oréal.

GOOD TO KNOW: THE RECRUITMENT PROCESS

• Interview with HR
• Interview with the hiring manager
• Interview with the business leader

We will be delighted to exchange with you!