{"id":3880746,"url":"https://alion.io/job/overstorm-analyste-soc-n3","title":"Analyste SOC N3","company":{"id":3909576,"name":"Overstorm","domain":"overstorm.fr","url":"https://alion.io/company/overstorm","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"freelance","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":350,"max":380,"currency":"EUR","period":"day","gross":null,"usd_annual":106000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-11-06T16:36:37Z","employer_posted_date":null,"last_verified_at":"2026-11-06T16:36:37Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Au sein de la Direction des Opérations et des Services IT, vous rejoignez l'équipe Sécurité Opérationnelle du SOC d'un acteur majeur de la protection sociale. En qualité d'Analyste SOC N3, vous prenez en charge les alertes et incidents escaladés par les analystes de niveaux 1 et 2 : qualification, investigations approfondies, analyse des causes racines et recommandations de remédiation. Vous analysez les environnements Windows et Linux à partir des solutions EDR CrowdStrike Falcon et Microsoft Defender for Endpoint, et menez des activités de Threat Hunting proactif à partir d'hypothèses, du renseignement sur la menace (CTI) et du framework MITRE ATT&CK. Vous améliorez les règles de détection, les politiques EDR et les cas d'usage SOC afin de réduire les faux positifs, et participez à la gestion des crises cyber. Expert et référent cybersécurité auprès des équipes infrastructure, réseau, applicatives et projets, vous conseillez sur la sécurisation des systèmes, la remédiation des incidents et l'intégration de la sécurité dans les projets. Vous accompagnez la montée en compétence des analystes N1/N2 et des équipes IT, produisez le reporting du SOC, préparez les comités opérationnels et de pilotage, et rédigez les standards, procédures et playbooks de sécurité.\nProfil recherché\nVous justifiez d'une expérience confirmée en analyse et réponse aux incidents de sécurité au sein d'un SOC, avec une expertise avérée des solutions EDR.\nMaîtrise de CrowdStrike Falcon : Event Search et Advanced Event Search, langage CQL ou LogScale, Real Time Response, politiques de prévention, Custom IOA.\n\nMaîtrise de Microsoft Defender for Endpoint : Advanced Hunting en KQL, Live Response, Automated Investigation & Response, intégration Microsoft Defender XDR et Intune.\n\nConnaissance approfondie des environnements Windows et Linux : Active Directory, journaux d'événements, registre, mécanismes de persistance, analyse de mémoire et triages forensic.\n\nConception de règles de détection et de corrélation, connaissance des SIEM (Microsoft Sentinel, Splunk, QRadar), maîtrise de KQL et SPL, connaissance de Sigma et YARA.\n\nMaîtrise du framework MITRE ATT&CK, de la Cyber Kill Chain, du CTI et des IOC ; connaissance des méthodologies NIST et SANS.\n\nCapacité à vulgariser les enjeux de cybersécurité, pédagogie, rigueur et sang-froid en situation de crise.\n\nLes compétences en automatisation SOAR, en scripting PowerShell et Python, ainsi qu'en sécurité Azure, Microsoft 365 et Entra ID, sont appréciées.","description_format":"text","description_chars":2505,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Recruiting & Staffing","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-06T17:56:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":25,"reasons":["seen:1","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":106000,"is_top_pay":false},"html_url":"https://alion.io/job/overstorm-analyste-soc-n3","json_url":"https://alion.io/job/overstorm-analyste-soc-n3.json","meta":{"generated_at":"2026-11-08T08:27:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18268,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3909576},"rest":"https://alion.io/mcp/rest/get_company?id=3909576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foverstorm-analyste-soc-n3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foverstorm-analyste-soc-n3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foverstorm-analyste-soc-n3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/overstorm-analyste-soc-n3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foverstorm-analyste-soc-n3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3880746}},{"tool":"search_jobs","arguments":{"company":"overstorm.fr","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3880746},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}