SOC Analyst Intern: Threat Detection & Incident Response

CMA CGM; Marseille; Sur place; EUR 42 000 - 66 000; Plein temps

Résumé du poste

CMA CGM is seeking a Security Operations professional in Marseille to protect the group by monitoring and responding to cyber incidents. You will join a 24/7 SOC, rotating shifts and collaborating with a dynamic team using high-level security solutions.

You will analyze alerts from SIEM/SOAR platforms, investigate events, and escalate incidents per procedures. Python skills are appreciated, with experience in transport or logistics considered a plus.

Qualifications

• Master's degree in Computer Science, Cybersecurity, Networks or a related field.
• Proficiency with SIEM, SOAR, and knowledge of network/host logs, firewalls, IPS/IDS, and email security gateways.
• Strong understanding of cybersecurity principles and attack methodologies (Cyber Kill Chain, MITRE ATT&CK).
• Python skills are appreciated.
• Experience in transport, maritime or logistics is a plus.

Responsabilités

• 24/7 operational monitoring in a rotating SOC.
• Analyze, contextualize and monitor security alerts from advanced platforms.
• Investigate security events and escalate incidents according to procedures.
• Handle security service requests from subsidiaries/stakeholders; analyze malicious files.
• Support incident response when an actionable incident is confirmed.
• Partake in threat hunting exercises with the CTI team.
• Design and improve playbooks, SOPs and guidelines.
• Collaborate on incident response simulations with SOC RUN Manager and leads.

Connaissances

SIEM

SOAR

Network/Host logs

Firewalls

IPS/IDS

Email security gateways

Python

MITRE ATT&CK

Cyber Kill Chain

Formation

Master's degree in Computer Science or Cybersecurity

Description du poste

CMA CGM is seeking a Security Operations professional in Marseille to protect the group by monitoring and responding to cyber incidents. You will join a 24/7 SOC, rotating shifts and collaborating with a dynamic team using high-level security solutions.

You will analyze alerts from SIEM/SOAR platforms, investigate events, and escalate incidents per procedures. Python skills are appreciated, with experience in transport or logistics considered a plus.