SOC Analyst – Threat Detection & Incident Response

About the role

Join F3C’s hybrid Security Operations Center (SOC) to monitor, detect, and respond to cyber threats in real time. You will work with cutting‑edge SIEM/XDR and EDR tools, contribute to threat intelligence, and help improve security services for our clients.

Key responsibilities

• Monitor and analyse security alerts from the SIEM/XDR (Sekoia) and EDR platforms.
• Lead Level‑2 investigations, assess impact, and recommend corrective actions.
• Handle end‑to‑end incident response: containment, eradication, remediation, and post‑mortem reporting.
• Perform technical analysis, event correlation, IOC investigation, and first‑level forensics.
• Enrich the CTI platform (MISP or equivalent) with qualified IOCs and threat reports.
• Map attacker TTPs to the MITRE ATT&CK framework and improve detection rules.
• Build and maintain SOC playbooks, runbooks, and support SOAR automation.
• Conduct threat hunting, identify visibility gaps, and recommend architecture or log coverage improvements.
• Present incidents, threat trends, and recommendations in client meetings.

Required profile

• Bachelor’s degree or equivalent in Cybersecurity or IT.
• 3+ years of experience in a SOC environment.
• Strong communication skills in English.

Required skills

• Proficiency with at least one SIEM (Sekoia, Splunk, Microsoft Sentinel, QRadar).
• Solid understanding of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Experience with CTI platforms (MISP, OSINT feeds, IOC analysis).
• Good knowledge of Windows/Linux systems, networking (TCP/IP, DNS, HTTP), and cloud environments.
• Scripting skills in Python or PowerShell (appreciated).

What we offer

• Company car and fuel card.
• Funded training and certifications.
• Remote work options with a satellite office.
• Flexible hours.
• Corporate credit card, meal vouchers, and parking.