CSIRT L1 Consultant

About the role

We are looking for a CSIRT L1 Consultant to join Thales’ Digital Identity & Security division. The consultant will support customers in handling security incidents, performing audits and delivering consultancy services to strengthen their cyber‑defence.

Key responsibilities

• Process security incidents following established procedures, including takedown, CVE publication, log mining, breach analysis and malicious document triage.
• Manage customer requests, incident tickets, change and use‑case tickets.
• Conduct incident‑response readiness assessments and audit missions for clients.
• Participate in mandatory CERT community events and monthly self‑training sessions.
• Ensure compliance with data‑protection regulations and the CSIRT Code of Practice.
• Document activities accurately in internal tools and maintain skill matrices.

Required profile

• Strong listening and communication skills in French and English.
• Methodical and organized, able to follow procedures and maintain accurate documentation.
• Commitment to customer satisfaction and ability to work under pressure.
• Team player with coaching abilities and adaptability to diverse customer environments.

Required skills

• Incident response and forensic acquisition.
• CVE publication and log mining.
• Breach analysis and malicious document triage.
• Audit and consultancy experience.
• Knowledge of cryptography and data security.
• Identity and access management, vulnerability management, network, OS and application security.