Cyber Security Lead-Cyber Security Analyst

Job description

Role Overview L3 Cybersecurity Operations Coordinator acting as a CSIRT/SOC relay between local business teams and global CDOC Ensures rapid incident response, escalation management, and stakeholder coordination Bridges business, functional, and technical cybersecurity operations Key Responsibilities Cybersecurity Operations & Coordination Act as primary cybersecurity contact for local sites Coordinate with global SOC/CDOC teams for operational alignment Ensure proximity-based support for critical assets and business priorities Incident Response & Escalation Management Handle L3 incident escalation and complex case coordination Lead incident triage, mitigation tracking, and remediation follow-up Support end-to-end incident lifecycle (detection → containment → recovery) Advanced Incident Handling (L3 Support) Manage critical and non-standard cybersecurity incidents Lead containment, threat eradication, and system restoration Validate secure remediation and recovery actions Crisis & Major Incident Management Support CSIRT-led crisis management during major cyber incidents Coordinate cross-functional response during high-impact events Stakeholder Management & Communication Act as bridge between technical teams and business stakeholders Ensure bi-directional communication (site ↔ SOC/CDOC) Provide status updates, impact analysis, and action visibility Requirements Translation & Solution Alignment Translate business/security requirements into technical controls Support global cybersecurity solution alignment with local constraints Continuous Improvement & Process Optimization Drive SOC/CDOC process improvements and operational efficiency Promote best practices, knowledge sharing, and service enhancement Key Skills & Competencies SOC / CDOC Operations CSIRT Coordination Incident Response (L3 / Advanced) Cyber Incident Management & Escalation Threat Mitigation & Remediation Crisis Management Stakeholder Management Security Operations (SIEM, Sentinel, Logic Apps) Risk & Impact Alignment Process Improvement & Automation Total Experience Expected: 08-10 years Engineering graduate - preferably B.E. /B tech in I.T or Computer Engineering Mandatory Certification SC-200: Microsoft Security Operations Analyst BLT1: Blue Team Level 1 GCIH or GCFE/GCFA (or equivalent to IR credential) Good to have CISSP/CISM Tools & Technologies SIEM platform: Microsoft Sentinel, QRadar or Splunk/ELK EDR platform: CrowdStrike and/or Defender Large enterprise or critical infrastructure with IT/OT boundaries Good to have Logic Apps, SOAR platforms, Threat intel platforms (MISP / OpenCTI) Automotive or manufacturing, OT/ICS security, experience in 24/7 SOC Support Hours 24x7 to be followed At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences. All of our positions are open to people with disabilities. About Sopra Steria Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion. The world is how we shape it.