Conduire et acheminer les véhicules d'intervention (SPL, PL et ADR) sur les différents chantiers, tout en assurant les opérations de maintenance industrielle.
Compensation
Salaire brut : 1 950€ à 2 000€ selon expérience
Responsibilities
Conduire et acheminer les véhicules d'intervention (SPL, PL et ADR) sur les différents chantiers
Assurer la sécurisation des zones de travail
Exécuter les opérations de maintenance industrielle (pompage de déchets dangereux, nettoyage et dégazage de cuves, etc.)
Encadrer et superviser l'aide opérateur
Signaler toute difficulté rencontrée sur chantier à sa hiérarchie
The Senior Technical Consultant is a cybersecurity professional with deep expertise across SIEM and SOAR platforms who supports Enterprise Clients.
Responsibilities
Design and deploy SIEM architectures across on-premises, virtual, and cloud environments, including data ingestion strategy for log forwarders, syslog collectors, and cloud-native telemetry in AWS, Azure, and GCP
Configure and design data pipelines and storage tiers for retention, query performance, and compliance requirements, including sizing decisions for high-volume log environments
Create custom correlation rules and detection content (Cortex XSIAM BIOC/correlation rules, CrowdStrike NG-SIEM correlation rules, Google SecOps YARA-L rules) tailored to client environments, moving beyond out-of-box use cases to address specific threats and false-positive patterns
Develop custom dashboards and SOAR playbooks using metrics, entities, and application views, translating raw log data into views that map to client SOC workflows and executive reporting needs
Build and maintain REST API integrations between SIEM/SOAR and EDR (including CrowdStrike Falcon and Cortex XDR), firewall, ticketing, and CMDB platforms, including custom automation scripts and data enrichment configurations
Lead the assessment and investigation of complex insider risk events within AstraZeneca’s Global Cyber Defence function, providing quality assurance, peer review and guidance across Insider Risk Management casework.
Compensation
Competitive salary and benefits package on offer!
Responsibilities
Lead complex, sensitive insider risk investigations from intake to closure
Assess alerts and concerns from security monitoring and partner teams
Develop investigation scopes, hypotheses and evidence requirements
Retrieve, preserve, organise and analyse security and business telemetry
Coordinate with Employee Relations, Legal, Compliance, Privacy, HR, DLP, Cyber Security and business teams
Lead the assessment and investigation of complex insider risk events within AstraZeneca’s Global Cyber Defence function, providing quality assurance, peer review and guidance across Insider Risk Management casework.
Compensation
Competitive salary and benefits package on offer! The successful candidate will have access to a flexible employee benefits fund, including holiday purchase and flexible time off, pension contributions, Share Save Plans, A performance recognition scheme and a competitive, generous remuneration package.
Responsibilities
Lead complex insider risk investigations
Assess alerts and concerns
Develop investigation scopes and hypotheses
Retrieve, preserve, organise and analyse security evidence
Coordinate with cross-functional teams
Requirements
Relevant education, professional training or equivalent practical experience
A successful Adversary Simulation member should possess a deep understanding of information security and computer science, paired with experience executing highly technical offensive assessments. They should understand advanced red and purple team campaign concepts such as performing social engineering and covert operations against complex networks while remaining entirely undetected, advanced application manipulation, and basic programming concepts.
Responsibilities
Design, scope, and lead complex technical assessments, including Purple Team engagements and other security initiatives to test attack detection and prevention effectiveness
Perform targeted offensive security assessments with a focus on detection and telemetry improvement
Collaborate with cross-functional teams including Incident Response, Threat Hunt, Threat Intelligence, and Security Engineering to drive improved security outcomes and resiliency
Identify, develop, and promote new capabilities and improve Adversary Simulation’s overall program maturity
Support and mentor internal teams on secure architecture, detection logic, and adversary behaviors
Requirements
Bachelor’s degree in Computer Science, Information Security, or a related field
As a Cyber Defense Analyst, you will be responsible for enabling efficient and accurate incident response activities and daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams like Security Architects, Security Engineers, Client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on incident response activities to support the client's CDC. In addition, you may be responsible for the analysis, response, containment, remediation, and long-term improvement of a client's security operation center (SOC) in order to maintain and transform incident detection and response capabilities.
Splunk Security Engineer with 7-8 years of experience in SIEM engineering, security monitoring, and threat detection.
Responsibilities
Administration, configuration, maintenance, and technical support of the Splunk Enterprise and Splunk Enterprise Security platforms
Successful onboarding and integration of assigned enterprise applications, systems, infrastructure, and log/data sources into Splunk
Configuration and optimization of log ingestion, parsing, normalization, indexing, retention, search performance, and data-management processes
Development, enhancement, and maintenance of Splunk searches, alerts, dashboards, reports, data models, applications, add-ons, and security/compliance content
Development and maintenance of custom Splunk solutions and automation using SPL, Python, Bash, Simple XML and other applicable technologies
Identify issues in customer Cyber Defense Centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
Conduct real-time analysis using SIEM, Endpoint, and Network based technologies with a focus on identifying security events and false positives.
Advise on CDC, CSIRT, and SOC Management activities.
Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operation Center (SOC) incident detection and response capabilities.
Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.