SOC Analyst – Threat Detection & Incident Response

About the role

Join F3C’s hybrid Security Operations Center where you will monitor, detect, and respond to cyber threats in real time. You will work with a dedicated team to continuously improve detection capabilities and provide actionable security insights to clients.

Key responsibilities

• Monitor and analyse alerts from the SIEM/XDR (Sekoia) and EDR tools.
• Lead Level‑2 investigations, assess impact, and recommend corrective actions.
• Handle end‑to‑end incident response: containment, eradication, remediation, and post‑mortem reporting.
• Perform technical analysis, event correlation, IOC investigation, and first‑level forensics.
• Enrich the CTI platform (MISP or equivalent) with qualified IOCs and threat reports.
• Map attacker TTPs to the MITRE ATT&CK framework and improve detection rules.
• Build and maintain SOC playbooks, runbooks, and support SOAR automation.
• Conduct threat hunting and identify visibility gaps.
• Present incidents, trends, and recommendations to clients.

Required profile

• Bachelor’s degree or equivalent in Cybersecurity or IT.
• 3+ years of experience in a SOC environment.
• Strong understanding of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Clear communication skills in English; additional languages are a plus.

Required skills

• Proficiency with at least one SIEM (Sekoia, Splunk, Microsoft Sentinel, QRadar).
• Experience with CTI platforms (MISP, OSINT feeds, IOC analysis).
• Good knowledge of Windows and Linux systems, TCP/IP, DNS, HTTP, and cloud environments.
• Scripting skills (Python, PowerShell) appreciated.
• Familiarity with SOAR automation and playbook development.

What we offer

• Company car and fuel card.
• Funded training and certifications.
• Remote work options with a satellite office.
• Flexible hours and corporate credit card.
• Meal vouchers and parking.