Ingénieur plateformes de cybersécurité (détection et réponse)
Core
Platform engineer ensuring availability, reliability, and security of cybersecurity tools and chains used for incident detection, analysis, and response.
Role type
Senior IC cybersecurity platform engineer (SOC)
Builds
Security tooling chains (SIEM, EDR, SOAR) and automation pipelines for a large public organization
Domain
Cybersecurity / SOC operations
Required skills
SIEM administration (Splunk, SPL), log collection architectures (agents, Syslog, API, parsing), incident response tooling (EDR/XDR, SOAR), automation scripting, high availability design, root cause analysis, technical documentation
Preferred skills
PowerShell, Python, Microsoft Azure, Entra ID, M365
Technologies
Splunk, SIEM, EDR, XDR, SOAR, Git, Syslog, Azure, Entra ID, M365
Responsibilities
Automate deployments and configuration controls; manage component lifecycle and obsolescence; identify telemetry anomalies (loss, latency, parsing errors); plan, test, and deploy security updates (signatures, rules); monitor detection tools for failures; produce regular status reports and key metrics; maintain technical documentation
Seniority
Senior, hands-on IC
