Trouvez votre prochaine offre d’emploi ou de mission freelance Endpoint detection and response (EDR)

Analyste SOC N3 (H/F) - Toulouse Nous recherchons un Analyste SOC N3 (H/F) pour renforcer nos capacités de détection d'incidents, d'analyse technique et de conseil cyber. Les activités sont fortement orientées environnements Web (e‑commerce, API, WAF, comportements utilisateurs, logs applicatifs). Les missions principales : Analyser et traiter les événements de cybersécurité (SOC N3) via le SIEM Splunk. Investiguer les incidents détectés sur les sites web et remontés par les outils ou les équipes de production. Contribuer à l'enrichissement du SOC (règles, détections, processus). Produire des statistiques et synthèses pour améliorer la posture de sécurité. Étudier et qualifier l'architecture et l'intégration d'outils de sécurité (WAF, EDR, Bastions, VPN…). Participer aux programmes de Bug Bounty (YesWeHack) et au suivi des vulnérabilités. Adapter les référentiels de sécurité (ANSSI, autorités européennes) au contexte interne. Assurer une veille active sur les menaces, vulnérabilités et tendances cyber.

IT Infrastructure & Systems Manager We are seeking an experienced and highly motivated Senior IT Infrastructure Manager with at least 7 to 10 years experience to oversee, manage, and continuously improve the organization's IT infrastructure, enterprise systems, network environment, and end-user computing services. The successful candidate will ensure the availability, security, performance, and resilience of critical business systems while leading technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Please note that this is a completely hands-on role and you must be able to be a Network Engineer, Network Security and Systems Manager all rolled in to on efunction. Role Description The IT Infrastructure & Systems Manager is a full-time role based in London with a hybrid working arrangement, combining on-site presence with some work from home. This role is responsible for managing and maintaining the organization's core IT infrastructure, including servers, networks, storage, and cloud services. Day-to-day tasks include overseeing system administration, monitoring performance and availability, implementing security best practices, and coordinating backup and disaster recovery processes. The role involves leading and supporting IT operations, resolving complex technical issues, and ensuring that systems, applications, and services remain stable and secure. The IT Infrastructure & Systems Manager will collaborate with internal stakeholders, manage vendors and service providers, contribute to IT strategy and roadmaps, and document procedures, standards, and configuration changes. Qualifications · Strong foundation in Information Technology and IT Operations, including infrastructure design, capacity planning, and service management. · Hands-on experience with System Administration and Troubleshooting across Windows and/or Linux environments, virtualization, and cloud platforms. · Proficiency in Network Security, including firewalls, VPNs, endpoint protection, access control, and security monitoring. · Proven ability to manage IT projects, prioritize tasks, and deliver improvements on time and within scope. · Excellent communication and stakeholder management skills, with the ability to explain technical concepts to non-technical audiences. · Experience leading or mentoring IT team members or support staff is highly desirable. · Relevant certifications (eg, ITIL, Microsoft, Cisco, CompTIA, or cloud certifications) are an advantage. · Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (eg, Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber ​​security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (eg, Syncovery, other SFTP). Networking Configure and support Cisco switches and routers. Administer FortiGate firewall environments. Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (eg, Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (eg, Paxton) Governance, Documentation & Process Improvement Develop, maintain, and enforce IT policies, standards, and operational procedures. Produce system architecture diagrams, technical documentation, SOP's, and performance reports. Identify and drive opportunities for automation and service improvement. Support technology planning, infrastructure modernization, and transformation initiatives. Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SaaS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (eg, Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Technical Competencies Data analysis and operational reporting Desktop and laptop support Infrastructure monitoring and performance management Certificate lifecycle management (SSL/TLS) Windows imaging and deployment, GPO, NTFS PowerShell scripting SQL Server administration Understanding of software development lifecycle (SDLC) and deployment processes Architecture review and systems optimization Asset management 7+ years of experience in enterprise IT infrastructure and systems administration. Experience within financial services, banking, trading, or treasury environments. Proven experience managing mission-critical infrastructure and applications. Experience operating within regulated and security-focused environments. Able to provide support to VIP stakeholders This is a hybrid role with 3 days at the office in Central London. Salary for this role will be in the range £60K - £65K. Do send your CV to us in Word format along with your salary and availability.

IT Infrastructure & Systems Manager We are seeking an experienced and highly motivated Senior IT Infrastructure Manager with at least 7 to 10 years experience to oversee, manage, and continuously improve the organization's IT infrastructure, enterprise systems, network environment, and end-user computing services. The successful candidate will ensure the availability, security, performance, and resilience of critical business systems while leading technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Role Description The IT Infrastructure & Systems Manager is a full-time role based in London with a hybrid working arrangement, combining on-site presence with some work from home. This role is responsible for managing and maintaining the organization's core IT infrastructure, including servers, networks, storage, and cloud services. Day-to-day tasks include overseeing system administration, monitoring performance and availability, implementing security best practices, and coordinating backup and disaster recovery processes. The role involves leading and supporting IT operations, resolving complex technical issues, and ensuring that systems, applications, and services remain stable and secure. The IT Infrastructure & Systems Manager will collaborate with internal stakeholders, manage vendors and service providers, contribute to IT strategy and roadmaps, and document procedures, standards, and configuration changes. Qualifications · Strong foundation in Information Technology and IT Operations, including infrastructure design, capacity planning, and service management. · Hands-on experience with System Administration and Troubleshooting across Windows and/or Linux environments, virtualization, and cloud platforms. · Proficiency in Network Security, including firewalls, VPNs, endpoint protection, access control, and security monitoring. · Proven ability to manage IT projects, prioritize tasks, and deliver improvements on time and within scope. · Excellent communication and stakeholder management skills, with the ability to explain technical concepts to non-technical audiences. · Experience leading or mentoring IT team members or support staff is highly desirable. · Relevant certifications (eg, ITIL, Microsoft, Cisco, CompTIA, or cloud certifications) are an advantage. · Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience. Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (eg, Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber ​​security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (eg, Syncovery, other SFTP). Networking Configure and support Cisco switches and routers. Administer FortiGate firewall environments. Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (eg, Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (eg, Paxton) Governance, Documentation & Process Improvement Develop, maintain, and enforce IT policies, standards, and operational procedures. Produce system architecture diagrams, technical documentation, SOP's, and performance reports. Identify and drive opportunities for automation and service improvement. Support technology planning, infrastructure modernization, and transformation initiatives. Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SaaS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (eg, Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Technical Competencies Data analysis and operational reporting Desktop and laptop support Infrastructure monitoring and performance management Certificate lifecycle management (SSL/TLS) Windows imaging and deployment, GPO, NTFS PowerShell scripting SQL Server administration Understanding of software development lifecycle (SDLC) and deployment processes Architecture review and systems optimization Asset management 7+ years of experience in enterprise IT infrastructure and systems administration. Experience within financial services, banking, trading, or treasury environments. Proven experience managing mission-critical infrastructure and applications. Experience operating within regulated and security-focused environments. Able to provide support to VIP stakeholders This is a hybrid role with 3 days at the office in Central London. Salary for this role will be in the range £60K - £65K. Do send your CV to us in Word format along with your salary and availability.

Senior IT Infrastructure & Systems Lead Our Client a bank, in Central London are looking for an experienced IT Infrastructure professional who is ideally looking for their next challenge in a dynamic and regulated financial services environment. We are seeking a highly skilled Senior IT Infrastructure Officer to lead the management, security, and continuous improvement of our enterprise IT infrastructure. The Senior IT Infrastructure Officer will be playing a key role in ensuring the availability, resilience, and performance of critical systems while supporting technologies across servers, networks, cloud services, cybersecurity, and business-critical financial applications. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence. Must have 7 years' experience in enterprise infrastructure, ideally within banking or financial services, and be passionate about delivering secure, reliable IT services.. The role will be Monday to Friday, 9:30am to 5:30pm and reporting into the Head of IT & Data. Due to the nature of the role, the individual is expected to work in our offices, 5 days per week, during their probationary period Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing & Branch Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). Networking • Configure and support Cisco switches and routers. • Administer FortiGate firewall environments. • Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (e.g., Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (e.g., Paxton) Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SAAS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/ XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Education Bachelor or Master's degree or professional qualification in relevant discipline (IT/Information Systems/Computer Science/Technology/Programming/Information Science/System Engineering/Computing) The role is based in Central London and initially will be be 5 days per week in the office. This is a 12 month FTC position. The salary for the role will be circa £70K - £75K. Do send your CV to us in Word format along with your salary and availability.

Senior IT Infrastructure Officer Our Client a bank, in Central London are looking for an experienced IT Infrastructure professional who is ideally looking for their next challenge in a dynamic and regulated financial services environment. We are seeking a highly skilled Senior IT Infrastructure Officer to lead the management, security, and continuous improvement of our enterprise IT infrastructure. The Senior IT Infrastructure Officer will be playing a key role in ensuring the availability, resilience, and performance of critical systems while supporting technologies across servers, networks, cloud services, cybersecurity, and business-critical financial applications. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence. Must have 7 years' experience in enterprise infrastructure, ideally within banking or financial services, and be passionate about delivering secure, reliable IT services.. The role will be Monday to Friday, 9:30am to 5:30pm and reporting into the Head of IT & Data. Due to the nature of the role, the individual is expected to work in our offices, 5 days per week, during their probationary period Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (e.g., Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing & Branch Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. 3. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (e.g., Syncovery, other SFTP). 4. Networking • Configure and support Cisco switches and routers. • Administer FortiGate firewall environments. • Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (e.g., Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (e.g., Paxton) Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SAAS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/ XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (e.g., Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Education Bachelor or Master's degree or professional qualification in relevant discipline (IT/Information Systems/Computer Science/Technology/Programming/Information Science/System Engineering/Computing) The role is based in Central London and initally will be be 5 days per week in the office. This is a 12 month FTC position. The salary for the role will be circa £70K - £75K. Do send your CV to us in Word format along with your salary and availability.

Senior IT Infrastructure Officer Our Client a bank, in Central London are looking for an experienced IT Infrastructure professional who is ideally looking for their next challenge in a dynamic and regulated financial services environment. We are seeking a highly skilled Senior IT Infrastructure Officer to lead the management, security, and continuous improvement of our enterprise IT infrastructure. The Senior IT Infrastructure Officer will be playing a key role in ensuring the availability, resilience, and performance of critical systems while supporting technologies across servers, networks, cloud services, cybersecurity, and business-critical financial applications. The candidate must have strong technical expertise in Windows/Linux, VMware, Microsoft 365, networking, cybersecurity, and infrastructure management who also enjoys solving complex challenges and driving operational excellence. Must have 7 years' experience in enterprise infrastructure, ideally within banking or financial services, and be passionate about delivering secure, reliable IT services.. The role will be Monday to Friday, 9:30am to 5:30pm and reporting into the Head of IT & Data. Due to the nature of the role, the individual is expected to work in our offices, 5 days per week, during their probationary period Infrastructure & Systems Management · Administer, maintain, and optimize Windows and Linux server environments. · Manage VMware virtualized infrastructure (vSphere 8 and above). · Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. · Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. · Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). · Support endpoint DLP, SIEM, and security monitoring tools (eg, Splunk, Tenable). · Manage patching processes using ManageEngine Patch Manager Plus. · Support Microsoft 365 services and related cloud technologies. · In depth understanding of Cyber ​​security · Monitor system performance, capacity, availability, and infrastructure health. · Ensure compliance with IT governance, security policies, and operational standards. End-User Computing & Branch Support · Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. · Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. · Manage OS deployment, imaging, image creation, maintenance, and software packaging. · Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. · Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. · Resolve technical incidents and service requests in line with agreed SLAs. 3. Enterprise Applications & Financial Systems Support · Support and administer business-critical applications, including: · Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP · Support enterprise file synchronization and replication solutions (eg, Syncovery, other SFTP). 4. Networking • Configure and support Cisco switches and routers. • Administer FortiGate firewall environments. • Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management · Support vulnerability management using tools such as Tenable. · Manage security monitoring and log analysis tools (eg, Splunk). · Perform SSL/TLS certificate lifecycle management using OpenSSL. · Create and manage CSRs, certificate chains, and private keys. · Ensure adherence to cybersecurity policies, standards, and regulatory requirements. · Support physical access control systems (eg, Paxton) Operating Systems · Windows 11 · Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization · VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 · ManageEngine Patch Manager Plus SaaS solutions SQL Server Security · Symantec Endpoint Protection (SEP) · Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDR Endpoint DLP solutions Firewall administration · Vulnerability management tools (eg, Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers · FortiGate Firewalls · LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers · Dell PowerVault SAN Storage Education Bachelor or Master's degree or professional qualification in relevant discipline (IT/Information Systems/Computer Science/Technology/Programming/Information Science/System Engineering/Computing) The role is based in Central London and initially will be 5 days per week in the office. This is a 12 month FTC position. The salary for the role will be around £70K - £75K. Do send your CV to us in Word format along with your salary and availability.

IT Cyber Security Analyst Scunthorpe, North Lincolnshire £45,000 - £55,000 + Training and Development + Great Pension + 27 Days Annual Leave + Bank Holidays + Life Assurance + Health Cash Plan + EAP + Sick Pay Are you a cyber security professional looking to take ownership of patching, threat detection, and incident response in a large-scale enterprise environment while playing a key role in strengthening security maturity? This is a fantastic opportunity to join a well-established organisation undergoing a major cyber transformation, where you will be at the centre of defending critical IT and OT systems. Working closely with internal teams and external SOC/MDR providers, you will contribute to monitoring threats, responding to incidents, and improving overall security posture. In this role, you will take ownership of patching across the IT estate, coordinate remediation on critical systems, and support vulnerability management processes. You will also contribute to threat hunting activities and help continuously enhance detection and response capabilities. The ideal candidate will have hands-on cyber security experience, strong knowledge across networks, endpoints, identity, and cloud security, and the ability to work collaboratively across technical teams to drive security improvements. The Role: *Monitor, triage, and respond to security incidents alongside SOC/MDR providers *Own patching processes across endpoints and servers *Coordinate vulnerability management and remediation activities *Support threat hunting and detection improvement initiatives *Contribute to audits, compliance, and security control implementation The Person: *Experience in cyber security, IT support, or OT/engineering environments *Strong understanding of security across networks, endpoints, identity, and cloud *Experience with patching tools and vulnerability management *Knowledge of SOC operations and incident response *Excellent problem-solving and communication skills Reference Number: BBBH276210 Rise Technical Recruitment Ltd acts an employment agency for permanent roles and an employment business for temporary roles. The salary advertised is the bracket available for this position. The actual salary paid will be dependent on your level of experience, qualifications and skill set and will be decided by our client, the employer. Rise are not responsible or liable for any hiring decisions made by the end client. We are an equal opportunities company and welcome applications from all suitable candidates.

Le candidat devra avoir le profil suivant : · Expert dans l'installation, la configuration et l'exploitation d'outils DLP Entreprise (endpoint, network, cloud) · Bonne compréhension des mécanismes de détection DLP : o Regex, fingerprinting, EDM/IDM, classification basée ML · Expérience dans le tuning des polices DLP (réduction des faux positifs / faux négatifs) · Expertise dans l'administration de suites bureautiques cloud ; expérience approfondie M365 fortement recommandée · Expérience en Blue Team, notamment en réponse à incidents liés à la fuite de données · Bonne connaissance des concepts réseaux (Layer 4–7), Web Security Gateway, TAP, firewall, inspection TLS, SMTP, HTTP(S), ICAP… · Bonne compréhension des mécanismes DLP Endpoint, y compris leurs limitations techniques · Bonne compréhension des problématiques SaaS et Shadow IT · Bonne compréhension des concepts de gestion des données (classification, labellisation, cycle de vie) · Connaissance des écosystèmes SIEM, ITSM, CASB · Expérience du secteur bancaire et compréhension des enjeux métiers associés · Capacité à vulgariser et sensibiliser les métiers aux problématiques DLP · Capacité d'automatisation appréciée (PowerShell, Python, APIs REST, intégration SIEM) · Des capacités organisationnelles et rédactionnelles ainsi que de la rigueur dans le travail sont des prérequis · Français courant, bonne maîtrise de l'anglais. Sa mission comprendra les tâches suivantes : · Participation active dans l'évolution de nos solutions de Data Security · Définition et optimisation des polices et stratégies de détection et de prévention · Assister l'équipe TDR (Threat Detection and Response) dans la conception et l'amélioration des technologies de protection des données de la banque · Collaboration de manière transversale avec la Blue Team et les équipes de production pour une amélioration continue de notre cyberdéfense · Gestion des alertes DLP dans le cadre de la phase projet · Diagnostic et résolution des incidents techniques liés à nos plateformes de Data Protection.

Consultant Expert Data Loss Prevention (DLP) – Cybersecurity Expert spécialisé dans les solutions de Data Loss Prevention (DLP), avec une solide expérience dans le déploiement, l'administration et l'optimisation de plateformes de protection des données en environnements Endpoint, Network et Cloud. Maîtrise des mécanismes avancés de détection DLP (expressions régulières, fingerprinting, EDM/IDM, classification basée sur le Machine Learning) ainsi que de l'optimisation des politiques de sécurité afin de réduire les faux positifs et les faux négatifs. Expérience confirmée dans l'administration d'environnements Microsoft 365 et des solutions de sécurité associées, avec une bonne compréhension des problématiques SaaS, Shadow IT, de la gouvernance des données, de la classification de l'information et du cycle de vie des données. Compétences reconnues en Blue Team et en réponse aux incidents liés à la fuite de données, ainsi qu'une bonne maîtrise des architectures réseau (couches 4 à 7), des technologies de sécurité (Web Security Gateway, TAP, Firewall, inspection TLS, SMTP, HTTP(S), ICAP), des solutions SIEM, CASB et ITSM. Habitué à collaborer avec des équipes SOC, Threat Detection & Response, Production et Sécurité afin d'améliorer en continu les dispositifs de protection des données, de traiter les alertes DLP et de résoudre les incidents techniques. Capable de sensibiliser les utilisateurs et les métiers aux enjeux de la protection des données grâce à une communication claire et pédagogique. Dispose également de compétences en automatisation (PowerShell, Python, APIs REST, intégration SIEM) permettant d'optimiser les processus de sécurité. Rigoureux, organisé et doté d'excellentes capacités rédactionnelles, le consultant évolue avec aisance dans des environnements exigeants, notamment au sein du secteur bancaire. Maîtrise courante du français et bonne maîtrise de l'anglais.

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3-month assignment. Do send your CV to us in Word format along with your salary and notice period.

ContexteParticiper à la consolidation et à l'optimisation de la chaîne de détection et de réponse aux incidents de sécurité au sein de l'équipe PSIRT EMEA, en assurant la stabilité et la performance des plateformes d'alerting, SOAR et du Global Security Dashboard, ainsi que leur adaptation aux exigences des différents territoires (APAC, AMER). Intégration, évolution et mise en condition opérationnelle des architectures de collecte des logs et de détection d'incidents (SIEM/SOAR). Déploiement et amélioration continue des cas d'usage et des règles de corrélation. Analyse des incidents de sécurité et réponse adaptée. Threat hunting et investigations forensic. Gestion et évolution du Global Security Dashboard. Au sein de la sous‑équipe Automation, les activités principales sont : Évolution et maintenance de la plateforme d'alerting. Évolution et maintenance du moteur SOAR (Security Orchestration Automation and Response). Adaptation des plateformes aux exigences locales (APAC, AMER) et appui aux équipes territoriales. Gestion et évolution des solutions d'allow‑listing et du suivi des formulaires d'investigation. Recueil des besoins d'évolution auprès des membres du PSIRT et des autres équipes sécurité. Intégration, en collaboration avec l'équipe Défense, des outils de sécurité tiers dans la plateforme. Documentation du code et de l'infrastructure, définition et suivi de la roadmap. Amélioration du monitoring et refonte de l'architecture du SIEM.

ContexteL'équipe de sécurité opérationnelle PSIRT (Production Security Incident Response Team) EMEA est en charge des missions suivantes pour l'ensemble des infrastructures de production d'une grande institution financière EMEA : Intégration, évolution et maintien en condition opérationnelle des architectures de collecte des logs et de détection d'incident de sécurité (SIEM/SOAR) Mise en place et évolution permanente des Use cases/Règles de corrélation Analyse et réponse aux incidents de sécurité Threat Hunting Investigation / Forensics Intégration, évolution et maintien en conditions opérationnelles du Global Security Dashboard Interventions au sein d'un environnement de production où les équipes d'infrastructure et d'applications mondiales sont sollicitées quotidiennement. Coordination avec de multiples interlocuteurs issus d'organisations complexes, nécessitant une communication claire et adaptée. Cadence de livraison rapide suivant la méthodologie Agile, avec des itérations courtes et des revues fréquentes.

Senior IT Infrastructure & Systems Manager We are seeking an experienced and highly motivated Senior IT Infrastructure Manager with at least 7 to 10 years experience to oversee, manage, and continuously improve the organization's IT infrastructure, enterprise systems, network environment, and end-user computing services. The successful candidate will ensure the availability, security, performance, and resilience of critical business systems while leading technical teams and supporting key stakeholders across the organization. This role requires a strong blend of technical expertise, leadership capability, operational excellence, and stakeholder management skills, within a complex enterprise environment that includes financial, trading, and treasury systems. Infrastructure & Systems Management Administer, maintain, and optimize Windows and Linux server environments. Manage VMware virtualized infrastructure (vSphere 8 and above). Oversee enterprise backup and disaster recovery solutions using Veeam Backup & Replication. Manage Veeam ONE monitoring and Veeam Recovery Orchestrator (VRO) environments. Administer endpoint security and encryption solutions, including Symantec Endpoint Protection (SEP) and Symantec Endpoint Encryption (SEE). Support endpoint DLP, SIEM, and security monitoring tools (eg, Splunk, Tenable). Manage patching processes using ManageEngine Patch Manager Plus. Support Microsoft 365 services and related cloud technologies. In depth understanding of Cyber ​​security Monitor system performance, capacity, availability, and infrastructure health. Ensure compliance with IT governance, security policies, and operational standards. End-User Computing Support Provide advanced desktop, laptop, printer, Mobile device (iOS) and branch office IT support. Deliver AV support for meeting rooms, conferencing, presentations, and collaboration systems. Manage OS deployment, imaging, image creation, maintenance, and software packaging. Administer Active Directory (AD), Group Policy Objects (GPOs) and user provisioning and NTFS permissions. Support Microsoft 365 applications including Outlook, Teams, OneDrive, and SharePoint. Resolve technical incidents and service requests in line with agreed SLAs. Enterprise Applications & Financial Systems Support Support and administer business-critical applications, including: Bloomberg FXT and Refinitiv Eikon, Murex Treasury System, SWIFT Alliance Access (SAA), 1AML, SIBS, GFMS, COP Support enterprise file synchronization and replication solutions (eg, Syncovery, other SFTP). Networking Configure and support Cisco switches and routers. Administer FortiGate firewall environments. Strong network fundamentals: DNS, DHCP, TCP/IP, LAN/WAN, Routing and connectivity troubleshooting. Monitor network performance, availability, and security posture. Security & Endpoint Management Support vulnerability management using tools such as Tenable. Manage security monitoring and log analysis tools (eg, Splunk). Perform SSL/TLS certificate lifecycle management using OpenSSL. Create and manage CSRs, certificate chains, and private keys. Ensure adherence to cybersecurity policies, standards, and regulatory requirements. Support physical access control systems (eg, Paxton) Governance, Documentation & Process Improvement Develop, maintain, and enforce IT policies, standards, and operational procedures. Produce system architecture diagrams, technical documentation, SOP's, and performance reports. Identify and drive opportunities for automation and service improvement. Support technology planning, infrastructure modernization, and transformation initiatives. Operating Systems Windows 11 Windows Server 2019/2022 (or equivalent enterprise environments) Red Hat Linux Infrastructure & Virtualization VMware vSphere / vCenter (v8.0.3 and above) Veeam Backup & Replication Veeam ONE, VRO Microsoft Office 365 ManageEngine Patch Manager Plus SaaS solutions SQL Server Security Symantec Endpoint Protection (SEP) Symantec Endpoint Encryption (SEE) SentinelOne – EDR/XDR Endpoint DLP solutions Firewall administration Vulnerability management tools (eg, Tenable) SIEM tools (e.g., Splunk) Networking Cisco Switches and Routers FortiGate Firewalls LAN/WAN networking and routing Hardware & Storage Dell PowerEdge Servers Dell PowerVault SAN Storage Technical Competencies Data analysis and operational reporting Desktop and laptop support Infrastructure monitoring and performance management Certificate lifecycle management (SSL/TLS) Windows imaging and deployment, GPO, NTFS PowerShell scripting SQL Server administration Understanding of software development lifecycle (SDLC) and deployment processes Architecture review and systems optimization Asset management 7+ years of experience in enterprise IT infrastructure and systems administration. Experience within financial services, banking, trading, or treasury environments. Proven experience managing mission-critical infrastructure and applications. Experience operating within regulated and security-focused environments. Able to provide support to VIP stakeholders This is a hybrid role 3 days in the office in Central London. Salary for this role will be in the range £55K - £60K. Do send your CV to us in Word format along with your salary and availability.

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £85K - £100K + Benefits. Do send your CV to us in Word format along with your salary and notice period.

Au sein du CERT (Computer Emergency Response Team) , vous serez rattaché(e) au pôle Anticipation. Le CERT est en charge de la détection, de la prévention et de la réponse aux incidents de sécurité sur le périmètre des réseaux opérateurs et des systèmes d'information. En rejoignant l'équipe Anticipation, vous intégrerez une équipe pluridisciplinaire spécialisée autour de trois activités : Cyber Threat Intelligence (CTI) – Veille et analyse des menaces cyber Vulnerability Operations Center (VOC) – Gestion et suivi des vulnérabilités Développement – Outillage et automatisation au service de la sécurité Objectifs et livrables Mission principale : Threat Hunting IA Votre mission consistera à mener une activité de Threat Hunting continu centrée sur les usages de l'Intelligence Artificielle , afin d'identifier, cartographier et sécuriser l'ensemble des déploiements IA sur notre périmètre. Objectifs et responsabilités Inventaire automatisé des usages IA Concevoir et mettre en œuvre un processus d'inventaire automatisé des usages de l'IA à travers l'ensemble du SI. Détecter les infrastructures consommant des modèles IA (API, services managés, déploiements on-premise). Identifier les cas de Shadow IA (usages non référencés ou non approuvés). Évaluation des risques liés aux modèles IA Évaluer les risques associés aux usages des modèles IA selon plusieurs axes : Exposition : surface d'attaque, accessibilité des endpoints, données exposées. Type de modèle : LLM, modèles de classification, modèles génératifs, etc. Guardrails : vérifier la présence et l'efficacité des mécanismes de protection (filtrage des entrées/sorties, limitations d'usage, politiques de sécurité). Détection et monitoring Identifier et modéliser les schémas de logs pertinents à destination du SOC pour la supervision des usages IA. Définir des règles de détection adaptées aux menaces spécifiques à l'IA (exfiltration de données, abus d'API, comportements anormaux). Tests de sécurité des modèles IA Réaliser des tests de robustesse des modèles à l'aide de l'outil Giskard (biais, hallucinations, fuites de données). Mener des campagnes de pentest orientées Prompt Injection (injection directe, injection indirecte, jailbreak) pour évaluer la résistance des modèles déployés. Sécurité Cloud et Shadow IA (Wiz) Analyser et interpréter les findings remontés par la plateforme Wiz. Configurer Wiz pour identifier et cartographier le Shadow IA sur l'ensemble du périmètre cloud de Bouygues Telecom. Proposer des remédiations et des recommandations de durcissement. Profil recherché Formation supérieure en cybersécurité, informatique ou domaine connexe. Expérience en Threat Hunting, CTI ou analyse SOC/CERT. Connaissance des architectures IA/ML et des risques associés (OWASP Top 10 for LLM). Maîtrise des outils de sécurité cloud (Wiz ou équivalent). Familiarité avec les outils de test de modèles IA (Giskard, frameworks de red teaming IA). Compétences en scripting et automatisation (Python, API REST). Capacité d'analyse, rigueur et esprit d'équipe. Compétences demandées Compétences Niveau de compétence Pentest Confirmé Threat Hunting Expert Analyste CERT Confirmé Analyste SOC Confirmé Intelligence Artificielle Expert

Votre missionSécurisation de l'infrastructure as Code Auditer et sécuriser les scripts de déploiement (Terraform, CloudFormation ). Mettre en place des outils de "Policy as Code" (ex: Checkov, OPA, Terrascan) pour bloquer les configurations non conformes avant même le déploiement. Appliquer le principe du moindre privilège sur l'ensemble des ressources Cloud. Optimiser la gestion des secrets et des certificats Opérationalisation et Optimisation des Outils de surveillance (Priorité Court Terme) Faire évoluer et maintenir la configuration du SIEM : centralisation et corrélation des logs (règles de détection) cloud pour détecter les comportements suspects ou les tentatives d'intrusion Mettre en place les indicateurs et tableaux de bord de sécurité des systèmes en production Analyse des alertes, coordination des investigations et réponses Auditer et affiner le paramétrage des outils de sécurité déjà en place (ex: Scanner de vulnérabilités, SAST/DAST, etc.). Intégrer ces outils de manière fluide dans nos pipelines CI/CD existants pour automatiser les contrôles Définir les seuils d'alertes pertinents pour réduire le "bruit" et se concentrer sur les risques critiques Monitorer les dérives de configuration (drift detection) entre l'état souhaité et le runtime. Gestion des Vulnérabilités et Incidents Industrialiser le processus de détection & remédiation : de la détection d'une faille au déploiement des correctifs. Agir en tant qu'acteur clé lors de la réponse aux incidents (Incident Response) : investigation, confinement et analyse post-mortem. Prioriser le backlog de vulnérabilités en fonction de l'analyse de risque business Définir des playbooks d'automatisation pour isoler une ressource compromise (ex: isolation d'une instance EC2 ou d'un pod Kubernetes suspect) Acculturation et Amélioration Continue Accompagner l'équipe platform et les développeurs dans l'adoption des bonnes pratiques “Security by design”, “DevSecOps” Rédiger la documentation technique et les procédures d'exploitation sécurité.