T

Thales

Global defense and aerospace electronics

Consultant CSIRT L2

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeNo salary listed

About the Job

Requirements

  • Hold a Master 2 (BAC +5) from an engineering school or university and have at least 5 years of experience in a SOC or CERT/CSIRT.
  • Have strong analytical skills and a keen sense of crisis management.
  • Work methodically and autonomously, while remaining calm during incidents.
  • Have direct client-contact experience, including during crises, and be willing to travel very frequently.
  • Communicate technical subjects effectively to non-technical audiences.
  • Hold a valid driving license.
  • Have at least B2-level English; French and Luxembourgish are an advantage.
  • Hold cybersecurity certifications such as GCFA, GCFE, GREM, or CDSA.
  • Be comfortable using digital investigation tools and techniques across systems, networks, and cloud environments, such as Velociraptor, grep, dissect, Volatility, and OpenSearch.
  • Have malware-analysis experience, including static and dynamic analysis.
  • Know the MITRE ATT&CK framework and be able to conduct threat hunting using tools such as Defender, Sentinel, and TrendMicro.
  • Know forensic artifacts such as Prefetch, UserAssist, MFT, and registry artifacts.
  • Have knowledge of cyber threat intelligence and tracking attacker tactics, techniques, and procedures.
  • Be able to write clear incident reports in English and actionable remediation recommendations.
  • Be proficient in scripting with Python, PowerShell, and Bash to maintain CERT tools.
  • Be comfortable managing multiple incidents simultaneously.

Responsibilities

  • Acquire, analyze, and qualify security incidents.
  • Lead incident response, including preparation, scoping, intelligence development, containment, and remediation.
  • Analyze malware and suspicious samples to extract indicators of compromise.
  • Conduct threat hunting based on hypotheses about client infrastructures.
  • Write incident reports containing an executive summary, timeline, and recommendations.
  • Contribute to the continuous improvement of incident-response playbooks and procedures.
  • Provide on-call coverage and support during cyber crisis management for clients.
  • Collaborate with SOC and threat-intelligence teams and clients to improve detection posture.
  • Lead and assist L1/L2 analysts during incidents.

Desired Qualifications

  • French and Luxembourgish language skills.

About the Company

Thales

Global defense and aerospace electronics

Thales designs and delivers critical technology for aerospace, defense, and digital security. Its products include electronics, software, and data-security systems that power air travel, payments, and modern military platforms, by integrating hardware and software to build systems such as avionics, radar, cybersecurity, and secure communications that collect sensor data and protect networks. It stands out through deep industrial experience, end-to-end solutions across defense, aerospace, and cybersecurity, and a focus on AI and quantum tech, aided by strategic acquisitions and partial state ownership. Its goal is to provide reliable, secure, and connected technologies that support national security, public safety, and everyday life by solving complex security and connectivity challenges.

Company size
10,001+
Company stage
IPO
Headquarters
Meudon, France
Founded
1893

Recently Posted Jobs

Explore more opportunities at Thales

See more jobs