CSIRT L3 Relay – Coordinateur·trice Opérationnel·le Cybersécurité
Core
L3 Cybersecurity Incident Coordinator and CSIRT relay for a major international automotive client, bridging local site operations with central Cyber Detection & Response (CDOC) teams to manage complex incidents.
Role type
Senior IC cybersecurity incident coordinator
Builds
Operational support for local client sites and central CDOC teams
Domain
Automotive industry cybersecurity
Deliverable
client delivery
Required skills
Cybersecurity operations, incident management, escalation handling, SIEM platforms (Microsoft Sentinel, QRadar, Splunk/ELK), EDR solutions (CrowdStrike, Microsoft Defender), GCIH or GCFE/GCFA certification, Microsoft SC-200 (Sentinel), French language proficiency
Preferred skills
Logic Apps, SOAR platforms, threat intelligence tools (MISP, OpenCTI), CISSP/CISM/GREM/CEH/CHFI certifications, IT/OT boundary experience, automotive/manufacturing/OT/ICS/SOC 24/7 experience
Responsibilities
Act as local cybersecurity point of contact for client sites, coordinate incident escalations and expert support, track mitigation and remediation actions, support advanced response to complex/critical incidents, pilot or support response/restoration actions, align technical risks with business priorities, translate business needs into cybersecurity requirements, ensure fluid communication between local and central teams, foster knowledge sharing and best practices
Seniority
Senior, hands-on IC
