Security Operations Manager - Remote

About Provence Apps

We operate a subscription e-commerce site selling coffee, tea and brewing gear, shipped from our own warehouse. Built and run from Rouen, the site connects pet owners with local sitters and dog walkers.

Provence Apps is hiring for the Security Operations Manager - Remote role to monitor, investigate and respond to security alerts across our environment.

Job duties

Review firewall, proxy, VPN and authentication logs for suspicious activity. Escalate confirmed incidents and follow the incident response plan. Document incidents with timeline, impact and root cause. Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint. Tune noisy detection rules with the security engineering team. Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM. Report on security awareness training and phishing simulation results. Analyse reported phishing emails, check headers and URLs, and purge malicious messages.

What we're looking for

8+ years in an SOC, security analyst or IT security role. Experience reading Windows Event Logs, Sysmon and Linux logs. CompTIA Security+ or equivalent (or ability to obtain within six months).

Perks and benefits

Rate: €57,000 - €68,000 annually

Health insurance (mutuelle) covered at 60%. Two days of remote work per week. Profit-sharing. Training budget. RTT days. BSPCE stock options. Remote work allowance.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Provence Apps.