SOC Engineer

Europcar Mobility Group; Paris; Sur place; EUR 45 000 - 65 000; Plein temps

Avantages offerts par ce poste

Ambiente dinâmico e desafiador

Oportunidades de crescimento profissional

Foco em inovação e tecnologia

Résumé du poste

Uma empresa de mobilidade líder está à procura de um SOC Engineer para proteger seus ativos digitais contra ameaças cibernéticas. O candidato ideal deve ter experiência em desenvolver e manter regras de detecção e responder a incidentes de segurança. A posição exige habilidades em monitoramento, investigação e comunicação eficaz com várias equipes. A empresa oferece um ambiente dinâmico e desafiador com um foco forte em segurança.

Qualifications

• Mínimo de 3 anos de experiência em operações de segurança.
• Experiência prática com ferramentas SIEM e EDR.
• Conhecimento em segurança de APIs e arquitetura de microserviços.

Responsabilités

• Desenvolver regras de detecção e monitoramento de segurança.
• Realizar investigações de incidentes cibernéticos.
• Conduzir caça a ameaças proativas.

Connaissances

Análise de logs

Engenharia de detecção

Resiliência em incidentes de segurança

Segurança em nuvem

Compreensão de técnicas de ataque

Formation

Experiência de 3-8 anos em SOC ou operações de segurança

Outils

Splunk SIEM

Ferramentas SOAR

EDR/XDR

Description du poste

You may choose to display a cookie banner on the external site. You must specify the message in the cookie banner and may add a link to a relevant policy. If you are unfamiliar with these requirements, please seek the advice of legal counsel.## ## **Job Description****MISSION:** Ensure EMG’s digital assets, cloud platforms, applications, infrastructure, APIs, and data ecosystems are continuously monitored, protected, and defended against cyber threats.The SOC Engineer is responsible for:* Building and tuning security detections* Operating EMG’s SIEM/SOAR platforms (Splunk, cloud-native tools)* Handling cyber investigations and forensics activities* Enhancing visibility across cloud, on-prem, and application layers* Supporting threat hunting, response, and vulnerability remediation* Ensuring alignment with EMG security policies, CISO directives, and regulatory obligationsThis role is essential for maintaining EMG’s cybersecurity resilience in a hybrid and modernized technology landscape.**MAIN RESPONSABILITIES:****1. Security Monitoring & Detection Engineering** ● Develop and maintain detection rules, dashboards, alerts, correlation logic, and analytics within:* Splunk (SIEM)* SOAR (such as n8n)* cloud-native SIEM/SOC tools* endpoint detection tools (EDR/XDR)* identity logs● Build detections and emerging threat patterns. ● Configure, monitor and troubleshoot security infrastructure devices and services such as EDR, DLP or CASB ● Identify opportunities for, and promote automation and new technical solutions and security tools to help mitigate security vulnerabilities and improve efficiency**2. Incident Investigation & Threat Response** ● Perform L3 investigation of security alerts, including:* anomalous authentication events* suspicious network activities* endpoint compromises* cloud misconfigurations* API misuse or credential abuse● Execute containment and remediation actions in collaboration with cybersecurity teams, IT Ops and Engineering teams ● Produce clear incident reports and contribute to RCA and continuous improvement. ● Establishing disaster recovery procedures and conducting breach of security drills.**3. Threat Hunting** ● Conduct proactive threat hunts using:* log patterns* anomalous behavior detection* threat intel feeds* historical investigations* cloud & API-specific threat vectors● Identify gaps in security visibility and propose instrumentation improvements.**4. Security Logging & Observability Integration** ● Ensure complete and reliable logging coverage across:* Cybersecurity tools (EDR, DLP, etc.)* APIs* cloud workloads* network traffic* databases* CI/CD systems (GitLab)● Work with Observability teams to ensure correlated visibility (Dynatrace + Splunk).**5. Vulnerability & Attack Surface Support** ● Support vulnerability management by correlating findings with real activity logs.● Validate remediation and track exploitation attempts related to EMG systems. ● Assist IT Ops and Engineering teams to prioritize and mitigate vulnerabilities.**6. Cyber Security Controls Validation** ● Validate enforcement of cybersecurity standards (E.g., Zero Trust, MFA, encryption, identity governance). ● Test security controls effectiveness through simulations or red-team collaboration.**7. Documentation, Playbooks & Knowledge Sharing** ● Maintain SOC runbooks, response playbooks, detection documentation, and forensic procedures. ● Identify and communicate current and emerging security threats**8. Collaboration Across IT & Business** ● Work closely with:* CISO (governance, escalation, risk alignment)* Cybersecurity Architecture Manager* IAM teams* Cloud & Production Services* Network & Infrastructure Ops* Domain Engineering Teams● Ensure consistent communication and coordination during incidents and monitoring activities.**IDEAL EXPERIENCE:*** 3-8 years in SOC, security operations, detection engineering, incident response, or cyber defense roles.* Hands-on experience with Splunk SIEM, SOAR tools, EDR/XDR, and cloud logging.* Understanding of cloud security (AWS/GCP), API security, microservices architecture.**SKILLS & COMPETENCIES:*** Strong log analysis, correlation, and detection engineering ability.* Understanding of attacker techniques, threat vectors, malware behavior, identity attacks.* Ability to operate during high-pressure security incidents.* Knowledge of IAM flows, network security, and container security.**OTHER PERSONAL CHARACTERISTICS:*** Analytical, methodical, and rigorous.* Calm under pressure; reliable during crises.* Highly ethical and trustworthy.* Curious and proactive in threat intelligence and detection improvement.* Risk-oriented: ability to detect, assess risks, and propose realistic solutions* Business-focused: ability to understand business priorities**Europcar Mobility Group**A Europcar Mobility Group é uma empresa global de mobilidade, com 75 anos de experiência em serviços de mobilidade e uma posição de liderança na Europa. “Ajudamos a mudar a forma como se desloca” é o que defendemos e nos une.Oferecemos aos particulares e às empresas uma vasta gama de serviços de aluguer de automóveis e carrinhas, seja por algumas horas, alguns dias, uma semana, um mês ou mais, a pedido ou por subscrição, contando com uma frota de mais de 250.000 veículos, equipados com os mais recentes motores, incluindo uma percentagem crescente de veículos eléctricos.As nossas marcas respondem a necessidades, casos de utilização e expectativas diferenciadas: Europcar - líder mundial no aluguer de automóveis e veículos comerciais ligeiros, com um posicionamento premium, Goldcar - líder na prestação de serviços de aluguer de automóveis de baixo custo na Europa, e Fox-Rent-A-Car, um dos principais intervenientes no mercado de aluguer de automóveis nos EUA, com um posicionamento “value for money”. A satisfação dos clientes está no centro da ambição do Grupo e dos nossos mais de 8.000 colaboradores, em todos os locais onde apresentamos as nossas soluções de mobilidade, graças a uma forte rede em mais de 130 países.Mais informações em: