Societe Generale recruits a Level 1 SOC Analyst

Societe Generale recruits a Level 1 SOC Analyst Security Operations Center Analyst Level 1 Reporting relationship: Team Lead SOC (Analyst Level 2). Main duty

Education / Qualifications

The SOC Level 1 Analyst provides continuous monitoring of the bank’s information systems. He/she analyzes in real time the security alerts generated by detection tools and contributes to operational control of asset compliance. He/she performs a first sorting of alerts (triage), qualifies proven incidents and quickly escalates complex threats to the next level, in compliance with operational procedures. Activities and tasks Monitoring and sorting Continuously monitor security consoles: SIEM, EDR, Firewall, IDS/IPS, Antimalware and DLP; Analyze security alerts on time (SLA). Qualification and initial analysis Conduct a first investigation to rule out false positives; Identify the nature of the incident: intrusion attempt, malware, data leak, etc. Climbing Transmit to Team Lead SOC (Level 2) alerts qualified as critical or complex; Provide a clear and structured preliminary report. Documentation Accurately write incident tickets; Record all actions taken in the Incident Management System (ITSM). Monitoring and improvement Participate in the updating of operational documentation; Monitor the evolution of SOC performance indicators (KPIs). Monitoring the coverage of security solutions

Other information

Monitor the deployment status of security solutions throughout the perimeter: workstations, servers, ATM and other equipment; Produce periodic reports on their coverage rate. Support for Vulnerability Management Participate in the execution of planned vulnerability scans; Ensure the preliminary qualification of discovered vulnerabilities; Notify the teams concerned.

Candidate profile

Education Bac + 3 or Bac + 4 in Computer Science, Information Systems Security, System Administration, Networks and Telecommunications, or an equivalent field.

Experience

• 1-2 years of experience; A significant internship or initial experience in information security or system/network administration is a major asset. Technical skills Knowledge of the basic concepts of network security: TCP/IP, DNS, HTTP/S, SMTP; Understanding of network architectures and operating systems: Windows, Linux, Cloud; Basics in reading and analysis of system and application logs; Familiarity with SIEM tools, such as Splunk, ELK, IBM QRadar or equivalent; Ability to use vulnerability scanning tools, such as Qualys, Tenable or OpenVAS; Knowledge of EDR, antimalware, DLP and encryption solutions, including BitLocker; Mastery of office suites and ticketing tools, such as ITSM and Jira; Ability to produce automated status reports with basic Excel or Power BI; Basics on Vulnerabilities. Soft skills Rigor, method, sense of analysis and critical thinking; Responsiveness and excellent stress management in emergency situations; Good writing and relational skills, with a team spirit and collaboration; Technical curiosity and analytical spirit; Absolute discretion and sensitivity to bank confidentiality issues; Rapid learning ability and commitment to continuing education; Perseverance and tenacity in monitoring stimulus to asset owners.
• 5. Special constraints Hours: shift work covering 24/7 supervision, or according to SOC opening hours set by the bank; Astrentes: participation in the system of periodic penalty payments on weekends and public holidays, on a weekly or monthly basis; Environment: Exposure to a continuous stream of alerts requiring sustained attention.

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]