IT Security SecOps

Overview

Role: IT Security SecOps at LCH SA, based in Paris. The role focuses on securing the IT infrastructure and business applications, managing protection and detection systems, and coordinating cybersecurity incident response with the Security Operations Centre to ensure a secure, resilient, scalable, and highly available information system. The candidate should have experience across vulnerability management, cyber incident management, identity and privileged access management, and cyber security service management (reporting, dashboards, KPI/SLA).

Responsibilities

• Monitor cyber security events from detection services (internal tooling and outsourced providers).
• Deliver cyber security response and recovery in coordination with IT teams.
• Deliver cyber security service activities, producing SLA and KPI for insourced activities.
• Oversee outsourced cyber security services with external partners.
• Provide support and expertise to other IT Security officers in controls execution and assessment.
• Deliver cyber security ITIL services (change management, problem management, incident management, etc.).
• Deliver security projects with internal IT teams and outsourcers to enhance the LCH SA cyber security posture.

What you’ll be doing

• Vulnerability Management : Monitor Threat Intelligence and drive urgent patching processes; assess all vulnerability scan reports, track and challenge remediation plans from technology teams.
• Cyber security incident management : Monitor events from internal tooling and outsourced services; provide high level incident response expertise (containment, eradication, forensics) and support recovery activities.
• Cyber security projects : Provide cyber security expertise as part of project management with technology teams.
• Cyber security controls : Perform controls to ensure no gaps in the cyber security posture (anti-malware coverage, firewall rules recertification) and provide expertise on controls assessment from other IT Security officers.
• ITIL cyber security management : Review and challenge changes and problem closures that may impact the CCP’s cyber security profile.

Qualifications

• Education : Bachelor’s degree in computer science, engineering, or related field (or equivalent experience).
• Professional experience : Minimum 5 years as a Security Engineer or similar role, with focus on controlling security solutions in regulated, highly available environments and delivering cyber security services (incident management, ITIL services related to cyber).
• Cyber security certifications : CISSP, GIAC, or equivalents are a plus.
• Languages : Fluent English mandatory for collaboration across an international group.
• Technical expertise : Network Security; OS/Databases/Middleware/Applications Security; VMware Cloud Security; Secret Management; Encryption; Vulnerability Management; EDR/AV; IAM/PAM; SIEM/SOC.
• Soft skills : Good communication, teamwork and collaboration, problem-solving, adaptability.