Operational Cybersecurity Engineer / SecOps – Microsoft Environment

Project overview

Nexoris is looking for a cybersecurity consultant to support an asset management player in maintaining and strengthening its operational security.

On a daily basis, you will work with the operational security manager and the CISO, in collaboration with infrastructure teams, business units, the group SOC, and technical partners.

Your role will be to identify risks, handle security events, and coordinate actions to concretely strengthen the protection of the information system.

Responsibilities

Essential prerequisites for carrying out the mission:

Client's technical environment: Microsoft 365, Intune, Citrix, CyberArk, Zscaler, Trend Micro, SentinelOne, Qualys, Splunk, ELK, Jira, ServiceNow, and GitLab.

You have 6/8 years of experience in operational security and a good command of Microsoft environments: Windows, Active Directory, Microsoft 365, and workstation security.

• Analyze security events and available logs, qualify incidents, and participate in their resolution with the SOC and technical teams.
• Process vulnerability scan reports, prioritize actions, and track remediation until closure.
• Perform recurring security checks and contribute to monitoring vulnerabilities and threats.
• Review authorization requests, privileged access, and requests for network or firewall rule openings.
• Conduct periodic access rights reviews and manage the correction of discrepancies.
• Assess risks related to workstation evolutions, new software, and technical changes.
• Contribute to security audits: evidence collection, gap analysis, and action plan tracking.
• Automate security controls, particularly with Python, and evolve dashboards.
• Produce reports, document activities, and participate in user awareness campaigns.
• You have 6/8 years of experience in operational security and a good command of Microsoft environments: Windows, Active Directory, Microsoft 365, and workstation security.
• Experience in financial services is essential.
• You know how to analyze logs, interpret vulnerabilities, examine network rules, and formulate recommendations adapted to risks.
• You are also capable of developing or maintaining automation scripts in Python.
• Soft skills: Autonomous, rigorous, and responsive, you know how to manage multiple subjects in parallel, coordinate stakeholders, and clearly present your analyses. You are comfortable with writing deliverables, Excel, and tracking actions.

Project details

Paris 8th, Madeleine area.

Remote work: up to two fixed days per week, subject to validation and service needs.

Start date envisioned: January 4, 2027, to be confirmed.

End of mission planned: December 31, 2027.

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 63-63 EUR/h
• Languages: French