C

Capgemini

Global consulting, technology services, outsourcing

Abl – Ingeniero SOC N1

Security Operations & Incident ResponsePosted on Nov 10
Full-timeMexicoNo salary listed

About the Job

Requirements

  • Requires 1 to 2 years of cybersecurity experience, including experience in a Security Operations Center and security-event monitoring.
  • Requires experience operating SIEM tools, including IBM QRadar, Splunk, or Microsoft Sentinel, and analyzing security alerts and managing security incidents.
  • Requires knowledge of information-security fundamentals, including confidentiality, integrity, and availability; TCP/IP; DNS; HTTP; HTTPS; SMTP; FTP; and SSH.
  • Requires knowledge of malware, phishing, ransomware, advanced persistent threats, indicators of compromise, and threat intelligence.
  • Requires experience with ServiceNow, Jira, Remedy, or other ticketing tools, as well as incident escalation.
  • Requires knowledge of network monitoring, basic security troubleshooting, routing and switching, VPN, web filtering, antispam, and endpoint detection and response.
  • Requires knowledge of ITIL, ISO 27001, and the NIST Cybersecurity Framework.
  • Requires the ability to prepare security reports and handle operational incidents.
  • Requires basic-to-intermediate technical English proficiency.
  • Requires a related career/degree in Systems, Networks, Telecommunications, or Information Security.

Responsibilities

  • Continuously monitor security events using SIEM platforms and analyze alerts generated by monitoring tools.
  • Apply standard operating procedures to classify incidents and identify anomalous behavior within the technology infrastructure.
  • Record, categorize, and escalate security incidents according to criticality matrices.
  • Perform basic network-traffic and security-event analysis and validate indicators of compromise, including IP addresses, domains, and hashes.
  • Correlate events using threat-intelligence information.
  • Document activities during each operational shift and prepare logs and incident reports.
  • Participate in shift handoffs and knowledge transfer, and follow up on incidents escalated to higher SOC tiers.
  • Help identify and rule out false positives, and validate correlation and monitoring rules.
  • Collaborate with cybersecurity teams to handle incidents and monitor perimeter-security devices and protection solutions.
  • Perform operational activities within the Security Operations Center and keep SOC operating documentation current.
  • Meet established service-level agreements and contribute to improving monitoring and response processes.

Desired Qualifications

  • CompTIA Security+, Microsoft SC-200, Fortinet NSE4, CCNA, Palo Alto, Check Point, or Trellix certifications.
  • Experience in managed cybersecurity services or 24/7 monitoring.
  • Knowledge of incident response or basic forensic analysis.
  • Familiarity with XDR platforms or SOC automation.

About the Company

Capgemini

Global consulting, technology services, outsourcing

Capgemini provides consulting, technology services, and outsourcing to help organizations transform digitally. Its offerings include strategy and transformation consulting, system integration, application development, IT infrastructure management, and managed IT operations. It differentiates itself with a global presence in over 50 countries and a focus on applying AI, cloud, and cybersecurity to real business problems. Its goal is to help clients navigate digital transformation and improve efficiency and innovation through tailored, contract-based or managed services.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1967

Recently Posted Jobs

Explore more opportunities at Capgemini

See more jobs