{"id":3824345,"url":"https://alion.io/job/5com-consulting-soc-cyber-cortex","title":"SOC - Cyber - Cortex","company":{"id":3908493,"name":"5COM Consulting","domain":"lab5com.fr","url":"https://alion.io/company/5com-consulting","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"freelance","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":40000,"max":67000,"currency":"EUR","period":"year","gross":null,"usd_annual":75220},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-05T17:37:55Z","employer_posted_date":null,"last_verified_at":"2026-11-05T17:37:55Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Mission de conseil | Environnement international | Anglais courant\nNous recherchons un ingénieur cybersécurité senior pour moderniser la collecte de logs de sécurité d’un grand groupe international. Au sein de l’équipe SOC, vous prendrez en charge le projet de bout en bout, de l’audit de l’existant au déploiement de la solution de collecte.\nL’objectif est de réduire les volumes et les coûts d’ingestion dans le SIEM tout en préservant la visibilité du SOC et les capacités de détection et de réponse de Palo Alto Cortex XSIAM. Le périmètre couvre des infrastructures Windows et Linux, des services cloud Microsoft Azure et Microsoft 365, ainsi que des équipements réseau et des solutions de sécurité.\nVos missionsCartographier les sources de logs, les mécanismes de collecte, les flux d’ingestion et les volumes associés.\n\nDéfinir les critères de comparaison des solutions de Telemetry Pipelines sur les volets technique, opérationnel, financier et sécurité. Réaliser les POC et recommander une solution.\n\nReprendre la maîtrise de la collecte des logs Azure et optimiser les flux avant leur ingestion dans le SIEM.\n\nConcevoir l’architecture cible, préparer le plan de migration et intégrer la solution retenue à l’environnement existant.\n\nMettre en œuvre les règles de filtrage, routage, normalisation, transformation et enrichissement des événements. Valider avec le SOC que les données nécessaires à la détection restent disponibles.\n\nDocumenter l’architecture, les configurations et les procédures d’exploitation, puis former les équipes pour leur permettre d’administrer la solution en autonomie.\n\nPour postuler, merci de transmettre votre CV, votre disponibilité et votre TJM, en précisant votre expérience sur Cortex XSIAM, la collecte de logs Azure et les pipelines de télémétrie.\nProfil recherché\nExpertise en SIEM et Log Management, avec une expérience avancée de Palo Alto Cortex XSIAM.\n\nExpérience solide de conception et d’intégration de pipelines de télémétrie, par exemple avec Cribl ou une solution équivalente.\n\nExpérience confirmée de la collecte de logs dans Microsoft Azure.\n\nMaîtrise des architectures réseau et des infrastructures serveurs en environnement hybride.\n\nCapacité à conduire un POC, à argumenter un choix d’architecture et à accompagner sa mise en production.\n\nAnglais courant, à l’oral comme à l’écrit.","description_format":"text","description_chars":2339,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","Mobile App Development Services","Web Development Services"],"lifecycle":[{"event":"open","at":"2026-11-05T17:56:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":75220,"is_top_pay":false},"html_url":"https://alion.io/job/5com-consulting-soc-cyber-cortex","json_url":"https://alion.io/job/5com-consulting-soc-cyber-cortex.json","meta":{"generated_at":"2026-11-07T18:53:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28968,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3908493},"rest":"https://alion.io/mcp/rest/get_company?id=3908493"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2F5com-consulting-soc-cyber-cortex"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2F5com-consulting-soc-cyber-cortex"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2F5com-consulting-soc-cyber-cortex"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/5com-consulting-soc-cyber-cortex\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2F5com-consulting-soc-cyber-cortex"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3824345}},{"tool":"search_jobs","arguments":{"company":"lab5com.fr","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3824345},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}