Senior SOC Analyst: Threat Detection & Incident Response

Equans France; Courbevoie; On-site; EUR 55,000 - 75,000; Full time

Job summary

Equans CSIRT is seeking a SOC Analyst (F/M) in Île-de-France to lead the initial detection, assessment and response to IT security incidents. You will analyze attacker methods, determine the extent of compromise and draft remediation recommendations to strengthen affected systems.

You will monitor threats, help set up SIEM and develop correlation rules. Candidates should have 3–5 years in cybersecurity operations, a related degree, and certifications such as GCIH/ECIH/Security+.

Qualifications

• Bachelor's or Master's in Computer Science, Information Technology, Cybersecurity, or related field.

Responsibilities

• Identify, analyze and qualify security events in real time.
• Assess the seriousness of security incidents.
• Notify security incidents and escalate when necessary.
• Transmit action plans and provide support for corrective measures.
• Recommend immediate measures and assist investigation teams.
• Help set up detection services (SIEM) and define log collection strategy.
• Develop event correlation rules and evaluate new solutions via PoCs.
• Contribute to procedures for incident response and threat hunting.
• Provide dashboards and keep documentation up to date.
• Inform management and advise on disaster recovery and business continuity plans.

Skills

Leadership

Problem-solving

Communication

Collaboration

Organizational skills

Autonomy

Multicultural teamwork

English fluency

Education

Bachelor's or Master's in CS/IT/Cybersecurity

GIAC GCIH / ECIH / CompTIA Security+

Tools

SIEM

Incident management systems

Malware analysis tools

Event log collection/processing

Job description

Equans CSIRT is seeking a SOC Analyst (F/M) in Île-de-France to lead the initial detection, assessment and response to IT security incidents. You will analyze attacker methods, determine the extent of compromise and draft remediation recommendations to strengthen affected systems.

You will monitor threats, help set up SIEM and develop correlation rules. Candidates should have 3–5 years in cybersecurity operations, a related degree, and certifications such as GCIH/ECIH/Security+.