Job Description
We are seeking an experienced SOC Manager to lead our internal Blue Team and strengthen the bank’s cyber defense capabilities. This role is key in protecting a diverse IT and cloud environment while driving improvements in threat detection, incident response, threat hunting, and vulnerability management.
As SOC Manager, you will oversee the day-to-day operations and the strategy of our Security Operations Center, coordinate with our external SOC partner, and collaborate closely with IT and Fraud teams to defend against emerging threats.
You will also drive the implementation and improvement of security tools, frameworks, and best practices to ensure resilience in a fast-paced, highly regulated financial environment. If you are eager to embrace this challenge, we look forward to receiving your application.
Key Responsibilities
Leadership and Team management
* Lead, mentor, and develop SOC analysts and engineers.
* Manage team performance, on-call rotations, and operational priorities.
* Foster a culture of continuous learning, resilience, and collaboration.
SOC Operations
* Oversee real-time monitoring and investigation of security events.
* Coordinate and manage incident response from detection through recovery.
* Act as the escalation point for complex incidents and investigations.
* Ensure high-quality documentation and communication of incidents.
* Drive proactive threat hunting and forensic investigations.
* Enhance detection rules, use cases, and playbooks in SIEM/SOAR platforms.
* Stay ahead of the evolving threat landscape, including financial fraud, APTs, and cybercrime TTPs.
Collaboration and Strategy
* Work closely with Infosec, IT and Fraud teams to align cyber defense with business needs.
* Partner with the external SOC to ensure effective incident triage and escalation.
* Engage with cyber authorities, peers and special interest groups.
* Provide actionable insights and recommendations to senior management.
* Contribute to vulnerability management programs and security improvement initiatives.
Qualifications
Mandatory
* 5+ years of experience in information security and SOC operations
* Advanced knowledge of technologies such as SIEM, EDR, SOAR, Cloud, Networking, Windows, Linux
* Understanding of the Cyber Threat Landscape, cybercrime economic model and threat actors
* Solid analytical and critical thinking abilities
* Positive attitude and interest in learning new skills
* Strong French and English communication skills, oral and written
Desired
* Bachelor or Master in Computer Science or similar
* Certifications such as CEH, CISSP, SANS GIAC
* Experience with: Microsoft Defender and Sentinel, Elastic, Kibana, OpenCTI, Python, N8N, Kubernetes, Azure
Additional Information
SQ2