Monitor clients' detection consoles (SIEM, EDR) to identify early indicators and intrusion attempts in real time
Triage alerts, conduct digital investigations (first-level forensics) and coordinate remediation actions
Collaborate with client experts to optimize correlation rules and develop new detection scenarios
Draft incident reports and participate in security committees to recommend improvements

Master's degree (equivalent to Bac+5) — Engineering degree or a specialized Master's in Cybersecurity
Minimum 4 years of experience as a SOC analyst
Operational experience with SIEM solutions (Splunk, Microsoft Sentinel, or IBM QRadar)
Strong knowledge of attack techniques (MITRE ATT&CK)
Ability to analyze system and network logs (Windows, Linux, web traffic)
Recognized certifications: CEH, CySA+, or vendor-specific certifications (e.g., Splunk Core Certified)
Proficient technical English (frequent international client interactions)

SOC Analyst

Key skills