Security Expert (L3)

We are looking for a senior SOC Analyst L3 to join our cybersecurity team. You will lead advanced threat detection and incident response for our clients, keep improving their security posture, and act as the technical reference and mentor for the SOC team.

Responsibilities

• Detect and analyse advanced threats and vulnerabilities using advanced tools and techniques
• Lead and coordinate incident response, from investigation and containment through eradication and recovery
• Serve as the technical escalation point for L1 and L2 analysts
• Hunt for suspicious activity based on threat intelligence feeds and indicators of compromise
• Improve security monitoring processes so incidents are detected and handled faster
• Perform forensic analysis on complex incidents
• Run regular security assessments and vulnerability scans to find and reduce risk
• Create knowledge base articles for handling medium and high severity incidents
• Work with client IT and security teams on security policies, procedures and best practices
• Write clear reports on incidents, trends and SOC performance for management
• Coach and mentor junior analysts to build their skills

Your profile

• Bachelor's degree in computer science, information security or a related field
• 5+ years of hands‑on SOC experience, with a strong focus on advanced detection and incident response
• Experience deploying and running EDR, XDR and SIEM solutions
• Skill with query languages (KQL, SPL or similar), SOAR implementation and product integrations
• Strong knowledge of networks, Windows and Unix/Linux systems, infrastructure and cloud services
• A thorough understanding of the incident response process: detection, triage, analysis, remediation and reporting
• Strong analytical skills and the ability to stay calm under pressure
• Clear communication with both technical and non‑technical people
• A client focus and a team mindset
• Fluent in English, with very good French and/or German
• Cloud environments such as Azure, AWS, GCP, …

Nice to have

• Certifications such as SC‑200, GCIH, GCIA, GCFA, CISSP or CEH
• Scripting in Python, PowerShell or Bash
• Other languages