SOC Operations Analyst II: Cyber Defense & Incident Response

Deloitte France; San Jose (CA); Hybrid; USD 83,000 - 163,000; Full time

Job summary

Deloitte France is seeking a Managed Services Engineer II within our Cyber Operate team in San Jose, California. You will monitor security alerts, respond to incidents, and coordinate ticketing to support 24/7 client operations.

You should have at least 1 year in cybersecurity, familiarity with SIEM and related technologies, and be able to work rotating shifts and travel about 10%. A hybrid on-site role is expected.

Qualifications

• Bachelor's degree or equivalent experience in IT.
• 1+ years of cybersecurity or security operations experience.
• Experience with SIEM and related security technologies such as IDS/IPS, DLP, proxies, WAFs, EDR, antivirus, sandboxing, and firewalls.
• Knowledge of attack activity, network protocols (TCP/IP, DNS, HTTP), and security architecture.
• Willingness to work 24/7 shifts and travel approx. 10%.
• Limited immigration sponsorship may be available.

Responsibilities

• Monitor security alerts and perform continuous monitoring per SOPs within SLA timeframes.
• Respond to incidents using documented procedures; validate alerts; manage tickets.
• Coordinate hotline calls; review escalated tickets; address client feedback.
• Perform IOC searches; monitor threat intel; provide content-tuning to L2 team.
• Document handovers; update playbooks; maintain processes; complete required training.

Skills

Team collaboration

Written and verbal communication

Attention to detail

Relationship building

Leadership of projects

Multitasking in fast-paced environment

Meeting deadlines

Guidance and mentorship

Education

Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or related IT discipline

Tools

SIEM

IDS/IPS

DLP

Proxy technology

WAF

EDR

Antivirus tools

Sandboxing

Firewalls (network/host)

Threat intelligence

Penetration testing

Job description

Deloitte France is seeking a Managed Services Engineer II within our Cyber Operate team in San Jose, California. You will monitor security alerts, respond to incidents, and coordinate ticketing to support 24/7 client operations.

You should have at least 1 year in cybersecurity, familiarity with SIEM and related technologies, and be able to work rotating shifts and travel about 10%. A hybrid on-site role is expected.