Senior Engineer - GISOCC IS Technology
Responsibilities As a Team Member, ensure that, * Guaranties confidentiality of information; * Ability to work independently and in a team; * Follow process and documentation; * Good problem solving abilities and analytical skills; * High inclination in reading and understanding technical documentation; * Good Written and oral skills in English; * High degree of commitment and diligence; * Willingness to work 24x7 shifts. Technical Requirements: * Strong expertise in Endpoint Security tools including monitoring, threat detection, and remediation. * Developed and maintained security playbooks and automated workflows to improve incident response efficiency. * Extensive experience in Incident Response (IR), including investigation, triage, containment, eradication, recovery, and post-incident analysis. * Strong understanding of the MITRE ATT&CK framework, Cyber Kill Chain, IOC/IOA analysis, and threat detection methodologies. * Investigate and triage DLP alerts to identify potential data exfiltration, policy violations, or insider threats. * Good working knowledge of SIEM platforms for log collection, event correlation, alert triage, threat hunting, and security monitoring. * Strong knowledge of log analysis, including Windows Security, System, and Application logs, authentication events, account lockouts, privilege escalation, and suspicious process execution. * Proficient in Scripting and Automation using PowerShell, Python, and Bash to improve operational efficiency. * Good knowledge of Vulnerability Management, including scanning, risk prioritization, and remediation tracking. * Good understanding of Operating Systems: Windows Server, Windows 11, and Linux distributions. * Hands-on experience working with Linux OS administration and security hardening. * Experienced in validating and verifying system security requirements, performing security analysis, and designing secure system architectures. * Conduct root cause analysis (RCA) for security incidents and provide remediation recommendations * Work with IT, Cloud, Network, and Application teams during incident response. * * Skills o Excellent communication skills are a must! o Strong understanding of task, project and responsibilities ownership o Ability to work independently and as part of a team o Willing to work off-hours in an on-call schedule o Creative and innovative thinking o Good organization skills to balance and prioritise work o Analytical and problem solving skills to troubleshoot issues Education/Training o Graduation (BSC/ BCA/ BE/B.Tech/MSC IT) with no history of arrears. o 5-7 years of CyberSecurity Experience Professional Experience o 5 to 7 years’ experience working within SOC Operations, Endpoint detection response & incident handling, threat hunting, vulnerability management o Experience working in Ticketing tools like ServiceNow, JIRA etc., o Experience with OS like windows, linux for analysis o Experience in SIEM tools for managing Playbooks o Experience with DLP Incidence handling o Experience with Log Source Monitoring o Experience in Automation & AI (Optional) Join Us ! Being part of our team, you will join: - one of the largest global innovative companies, with more than 20,000 engineers working in Research & Development - a multi-cultural environment that values diversity and international collaboration - more than 100,000 colleagues in 31 countries... which make a lot of opportunity for career growth - a business highly committed to limiting the environmental impact if its activities and ranked by Corporate Knights as the number one company in the automotive sector in terms of sustainable development More information on Valeo: