- Company Name
- Keolis UK & Ireland
- Job Title
- Ingénieur SecOps Sécurité Opérationnelle F/H
- Job Description
-
**Job Title**
Ops Security Engineer – SecOps (Male/Female)
**Role Summary**
Design, implement, and maintain operational security controls for the enterprise IT environment. Lead SecOps projects (CyberSOC, bastion, AD hardening), integrate security into new developments, manage security tools (EDR, SIEM, vulnerability scanners), monitor threats, and enforce compliance across on‑premises, Azure, and hybrid cloud infrastructures.
**Expectations**
- Deliver end‑to‑end security solutions within defined timelines.
- Keep systems compliant with ISO 27001/27002/27005, EBIOS RM, and other relevant standards.
- Independently triage alerts, perform incident response, and improve security posture.
- Communicate findings and recommendations to technical and business stakeholders.
**Key Responsibilities**
- Pilot and execute SecOps initiatives: CyberSOC, bastion setup, AD hardening.
- Embed security controls into projects following a prescribed methodology.
- Benchmark and assess market security solutions; validate and integrate them into KB2M’s SI.
- Conduct continuous vulnerability and threat monitoring; manage remediation workflows.
- Deploy, administer, and operate security components (EDR, vulnerability scanners, SIEM, etc.).
- Formalize, evolve, and enforce operational security processes and policies.
- Track and report on patching cycles, maintain security incident metrics.
- Coordinate with SOC partners, validate access authorizations, and generate cyber‑security indicators.
- Produce and keep up‑to‑date security operational documentation (processes, technical guides).
- Perform periodic compliance reviews: security rules, accounts, permissions, directory structures.
- Utilize control tools for governance and audit.
**Required Skills**
- Expert in CrowdStrike, Cyberwatch, Lansweeper, WAPT, WSUS, Microsoft LAPS, Ambionics.
- Proficient scripting: Bash, PowerShell, Python.
- Experience in pentesting, forensic analysis, OSINT, incident response.
- Deep knowledge of malware protection, EDR/XDR, SIEM, VPN, SASE, Zero‑Trust, WAF, IPS/IDS.
- Strong networking fundamentals: IP addressing, routing, switching, VLANs, firewalls, proxies, ADC, 4G/5G, M2M.
- Operating systems: Windows and Unix/Linux.
- Identity governance: identification, authentication, authorization.
- On‑premise, private cloud, Azure experience.
- Familiarity with ISO standards (27001/27002/27005) and EBIOS RM risk analysis.
- Project management, stakeholder communication, security awareness training.
**Required Education & Certifications**
- Bachelor +4/5 (Master) in Engineering or equivalent with a specialization in Information Security.
- Minimum 1 year of operational security experience (internship or professional).
- Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, Azure Security Engineer Associate, CrowdStrike Certified Protection Analyst (CCPA), or equivalent.