SOC Analyst – Threat Detection & Incident Response

About the role

Join F3C’s hybrid Security Operations Center where you will monitor, detect, and respond to cyber threats in real time. You will work with a dedicated team to continuously improve detection capabilities and deliver actionable security insights to clients.

Key responsibilities

• Monitor and analyse security alerts from the SIEM/XDR (Sekoia) and EDR tools.
• Lead Level‑2 investigations, assess impact, and recommend corrective actions.
• Handle end‑to‑end incident response: containment, eradication, remediation, and post‑mortem reporting.
• Perform technical analysis, event correlation, IOC investigation and first‑level forensics.
• Enrich the CTI platform (MISP or equivalent) with qualified IOCs and threat reports.
• Map attacker TTPs to the MITRE ATT&CK framework and contribute to detection rule improvement.
• Build and maintain SOC playbooks, runbooks and support SOAR automation.
• Conduct threat hunting, identify visibility gaps and propose architecture or log‑coverage enhancements.
• Present incidents, threat trends and recommendations in client meetings.

Required profile

• Bachelor’s degree or equivalent in Cybersecurity, IT or related field.
• 3+ years of experience working in a SOC environment.
• Strong understanding of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Clear communication skills in English; additional languages are a plus.
• Relevant certifications such as CompTIA CySA+, SC‑200, CEH, GCIA or equivalent are appreciated.

Required skills

• Proficiency with at least one SIEM (Sekoia, Splunk, Microsoft Sentinel, QRadar).
• Experience with EDR tools and CTI platforms (MISP, OSINT feeds, IOC analysis).
• Good knowledge of Windows and Linux operating systems.
• Understanding of networking protocols (TCP/IP, DNS, HTTP) and cloud environments.
• Scripting abilities in Python or PowerShell.
• Familiarity with SOAR automation and detection rule tuning.

What we offer

• Company car and fuel card.
• Funded training and certifications.
• Remote work option with a satellite office.
• Flexible working hours.
• Corporate credit card, meal vouchers and parking.