CSIRT L3 Relay – Cybersecurity Operational Coordinator

Responsibilities

• Act as the local cybersecurity point of contact for client sites
• Coordinate incident escalations and expert support
• Follow up on mitigation, remediation, and correction actions
• Support response to complex or critical cybersecurity incidents
• Coordinate response during major cyber crises
• Translate business needs into cybersecurity requirements and solutions
• Ensure fluid communication between local and central teams

Requirements

• Solid knowledge of cybersecurity operations, SOC/CDOC environments, and incident response
• Experience coordinating technical and non-technical stakeholders
• Proficiency in incident management, escalations, and mitigation tracking
• Practical experience with SIEM platforms (Microsoft Sentinel, QRadar, Splunk, or ELK)
• Experience with EDR solutions (CrowdStrike and/or Microsoft Defender)
• Mandatory certifications: GCIH or GCFE/GCFA; Microsoft SC-200 (Sentinel)
• English proficiency required; French is an asset
• Degree in cybersecurity, computer science, or equivalent experience

Preferred Qualifications

• Experience with Logic Apps, SOAR platforms, or threat intelligence tools (MISP, OpenCTI)
• Additional certifications such as CISSP, CISM, GREM, CEH, or CHFI
• Experience in large enterprises or IT/OT boundary environments
• Experience in automotive, manufacturing, OT/ICS security, or 24/7 SOC sectors

About the Company

Sopra Steria is a European leader in consulting, digital services, and software development, supporting clients through digital transformation with innovative solutions.