SOC Specialist

Job Description

Atos is a global leader in digital transformation with 120,000 employees in 73 countries and annual revenue of € 13 billion. European number one in Cloud, Cybersecurity and High-Performance Computing, the Group provides end-to-end Orchestrated Hybrid Cloud, Big Data, Business Applications and Digital Workplace solutions through its Digital Transformation Factory, as well as transactional services through Worldline, the European leader in the payment industry. With its cutting-edge technologies and industry knowledge, Atos supports the digital transformation of its clients across all business sectors. The Group is the Worldwide Information Technology Partner for the Olympic & Paralympic Games and operates under the brands Atos, Atos Syntel, Unify and Worldline. Atos is listed on the CAC40 Paris stock index.

Your role in Atos - Job Description

SOC Deployment Expert / Specialist – GRC Senior Consultant role is a strong technical position which will support the various on-site or remote Customer’s Security Operations projects related to advisory on SOC architecting or deployment consulting. This role is combining the ability to understand our customer’s strategic and business needs related to in-house SOC or its outsourcing, whilst also having a deep technical knowledge of security operations processes and technologies. You will be required to work on multiple client accounts and must have the ability to develop and present secure solutions to leadership and technical teams. In addition, the consultant will be required to lead and assess risks imposed by technical solutions and advice clients of security standards, best practice and solutions relating to SOC solutions. Moreover, this role may also include close collaboration and driving of SIEM/SOC business supporting sales, presales, consulting, and partners to support our clients from proposal to delivery. In comparison to SIEM Deployment Consultant it is required for this role having more broad experience in SOC as a whole service (preferably both models inhouse and outsourced) and knowledge not limited SIEM solution implementation only but covering whole bunch of various dedicated security systems supporting SOC service.

What Are We Looking For / Essential skills and competencies:

• More than 5 years’ experience working in IT Security on positions related to SOC service, processes or similar security domains,
• Master's degree in Computer Science, Engineering, or related field or equivalent work experience
• Experience with SOC technology and integration or implementation of the tools (such as SIEM solutions RSA, Arcsight, Splunk and Q-Radar, FireEye, ZScaler, Exabeam, McAfee EPTM, Wazuh), anti-Virus/Malware, anti-DDOS, DLP, WAF, FW Rules Management, forensic tools, Vulnerability Scanners, Antivirus Software, Proxy, etc.)
• Experience in Service manager solutions: ServiceNow, Archer
• Experience in Forensics solutions: Magnet Axiom & Axiom Cloud, NUIX, EnCase, Autopsy
• Knowledge of TCP/IP Networking, hardware, protocols, LAN configuration, security architectures and LAN/WAN technologies; Solid understanding of the underlying LINUX/UNIX & Windows OS security architecture
• Operational experience as an analyst, operations lead, incident responder or SOC manager in a Security Operations, Cyber Defense or Threat Intelligence Centre is a big plus
• Experience in articulation the business benefits of SOC/SIEM to business/technical customers as appropriate, helping them to identify potential future opportunities and bringing them to the attention of people who can commit the required resources to realize those benefits.
• Preferred certificates: CISSP, EnCE, GCIH, GCFE, GCFA, OSCP, PCNSE (Palo Alto Newtorks Certified Network Security Engineer), Arbor Networks Peakflow SP: System Administrator, Arbor Networks Peakflow SP/TMS: DDoS Detection and Mitigation (User), GREM (GIAC Reverse Engineering Malware), CCNA (Cisco Certified Network Associate), CCDA (Cisco Certified Design Associate)
• Other security certifications like: CISA, SSCP, SANS GSEC, ECSA, ECSP, CEH, CompTIA Security+ or equivalent certification is a plus
• Nice to have - Interpreting and applying appropriate Standards, Policies and legislation, especially NIS Directive and its impact on SOC, and other (could be of one or few of them e.g. ISO27001, PCI DSS, COBIT, SOX, DPA, HMG SPF, GDPR, NIST etc.) confirmed by respective certifications or relevant experience
• Advising on classification of incidents/alerts from Tier 1 (T1), Tier 2 (T2), on confirming them as real incidents or discard as false-positives,
• Advisory on shaping the way contracts are delivered from SOC, by taking part in the onboarding,
• by attending meetings with the business client, by transforming expectations into configurations and workflows, correlation rules fine tuning.
• Ability to prepare SOC documents and presentations in such a way that they are easily understood by the appropriate audience
• Excellent customer service and communication (oral / written) skills required. Able to communicate with internal and external senior management confidently and demonstrate the professionalism
• Ability to adapt a consulting style appropriate to the situation and can identify up-sell opportunities
• Ability to demonstrate a broad understanding of market dynamics, an industry area, commercial issues, and technical concerns whilst maintaining depth in SOC focus area
• Must be able to work independently or with a team, under minimum supervision, reporting to Project Manager of given assignment or Line Manager.
• Fluent English is a must, Intermediate or Fluent German or French is a great plus
• International mobility to serve our global clients and work with our global clients (50-100%) Europe or other continents. You accept readiness to travel up to 80-100% on average 60% also there are remote projects dependent on the assignment, mainly Europe but other continents are also possible.
• EU work permit is a must, US visa is a plus
• UK Security Clearance or UK citizenship – is a big plus
• Location - anywhere in Poland close to an international airport.

Why you should join us:

• Participation in the international consulting projects along with the opportunity of implementing your own ideas and improvements
• Working for large clients in all sectors (like public, manufacturing, retail, finance, telecom, transport)
• Internal and external (technology) courses
• Access to our knowledge library and interdisciplinary e-learning portals
• A good salary and attractive extra benefits
• Excellent career opportunities
• The opportunity to work on complex projects for interesting clients
• Working in an innovative environment with ambitious colleagues and a committed practice partner and practice manager.

We take care of your personal data privacy. More information about processing your personal data within recruitment process you can find on our website: https://atos.net/pl/polska/gdpr .