IT Security SecOps Senior

Project overview

Context

As part of strengthening its cybersecurity system, a major player in financial markets and clearing houses (CCP) is looking for a Senior IT Security SecOps expert to join its IT Security teams based in Paris.

The mission consists of ensuring the security, resilience, and availability of IT infrastructures and business applications, in a critical, highly regulated, and international financial environment.

The consultant will be involved in operational security activities, vulnerability management, cyber incident response, and the management of internal and outsourced security services.

Missions

Required Technical Skills

Profile Sought

• Vulnerability Management
• Ensure monitoring of emerging cyber threats and vulnerabilities (Threat Intelligence).
• Analyze vulnerability scan reports for infrastructures and applications.
• Manage and challenge remediation plans with technical teams.
• Coordinate urgent patching campaigns (patch management).
• Cybersecurity Incident Management
• Monitor security events and alerts from internal tools and outsourced SOC services.
• Participate in cyber incident management: analysis, containment, eradication, and forensic investigation.
• Coordinate remediation and recovery actions with IT teams.
• Contribute to the continuous improvement of incident detection and response systems.
• Operational Security and Controls
• Perform security controls on infrastructures and applications.
• Verify EDR/antivirus solution coverage and firewall rule compliance.
• Provide technical expertise to IT Security teams in control evaluation.
• Identify security gaps and propose corrective actions.
• Cybersecurity Services Management
• Supervise outsourced security services and coordinate interactions with providers.
• Track service level agreements (SLAs), key performance indicators (KPIs), and dashboards.
• Contribute to ITIL processes: change, incident, and problem management.
• Assess the impact of technical and application changes on the security level.
• Cybersecurity Projects
• Participate in projects to improve and strengthen the cybersecurity posture.
• Support IT teams in integrating security requirements.
• Coordinate interventions with internal technical teams and external providers.
• Network Security: firewalls, segmentation, flow protection.
• Systems Security: OS, databases, middleware, and applications.
• Cloud and Virtualization: VMware environment security.
• Identity Management: IAM, PAM, and secrets management.
• Data Protection: encryption and security mechanisms.
• Vulnerability Management: scans, risk analysis, remediation, and patch management.
• Endpoint Security: EDR, antivirus, and protection of workstations and servers.
• Security Monitoring: SIEM, SOC, alert detection, and processing.
• Incident Response: investigation, forensic, containment, and recovery.
• IT Service Management: ITIL processes, SLA/KPI tracking, and provider management.
• Higher education in IT, cybersecurity, or engineering (Bac+3 to Bac+5 or equivalent experience).
• Minimum 10 years of experience in operational IT security, ideally as a Security Engineer, SecOps Engineer, or cyber expert.

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French