Ingénieur CSIRT
Core
CSIRT engineer supporting operational security missions for a major banking client, focusing on incident detection, analysis, response, and threat hunting in critical technical environments.
Role type
Senior IC cybersecurity engineer (CSIRT/SOC)
Builds
SIEM detection rules, monitoring tests, and security response capabilities for production infrastructure
Domain
Cybersecurity / Financial Services
Required skills
SIEM/SOC operations, Threat Hunting, incident response, malware/APT techniques, Windows/Linux security, scripting (Python, PowerShell, Bash, Java, SQL, Ansible), MITRE ATT&CK framework
Preferred skills
Forensics, malware analysis, reverse engineering, pentesting, ETL tools (Pentaho)
Technologies
SIEM, SOAR, EDR, ELK, Big Data, PowerShell, Python, Java, SQL, Ansible
Responsibilities
Create, test, and maintain SIEM detection rules; design and implement monitoring tests for detection use cases; conduct Threat Hunting and analyze weak signals on Big Data/ELK environments; develop and evolve SIEM use cases and scripts; participate in incident analysis and response with SOC/CERT/Purple Team; collaborate with Purple Team to identify new detection capabilities; challenge Defense teams on security tool capabilities; study and propose innovative solutions for detection and response; maintain operational conditions of log collection and detection infrastructures; produce reports and track security operational indicators
Seniority
Senior, hands-on IC
