Security Analyst

Company description

Publicis Re:Sources is the backbone of Publicis Groupe, the world’s most valuable agency group. We are the only full service, end-to-end shared service organiza on in the industry, enabling Groupe agencies to do what they do best: innovate and transform for their clients. Formed in 1998 as a small team to service a few Publicis Groupe firms, Publicis Re:Sources has grown to 5,000+ employees in over 66 countries. We provide technology solu ons and business services including finance, accoun ng, legal, benefits, procurement, tax, real estate, treasury and risk management. We con nually transform to keep pace with our ever-changing communica ons industry and thrive on a spirit of innova on felt around the globe. Learn more about Publicis Re:Sources and the Publicis Groupe agencies we support at. Website h ps://www.publicisresources.com

Responsibilities

 Monitor and analyze security alerts from EDR pla orm and NGSIEM. Perform in-depth analysis and co-rela on 
with other security tools. 
 Monitor, analyze, and inves gate security alerts generated from EDR pla orm, SIEM solu ons, NGSIEM and 
Microso 365 Security portal. 
 Perform in-depth inves ga on and correla on of alerts across EDR, SIEM, M365, Email Security, CASB, and DLP 
pla orms. 
 Escalate cri cal incidents and provide detailed inves ga on findings along with ac onable remedia on 
recommenda ons. 
 Deep technical exper se, analy cal thinking, and the ability to lead inves ga ons. 
 Strong understanding of malware analysis, threat vectors, and a acker TTPs. 
 Conduct proac ve threat hun ng across endpoints using behavioural analy cs and threat intelligence. 
 Develop and execute custom detec on rules and queries. 
 Proficiency in log analysis, forensic inves ga on, and endpoint telemetry. 
 Collaborate with cross-func onal teams to contain, eradicate, and recover from security alerts/incidents. 
 The Analyst works with mul ple technology pla orms and interfaces with other groups within Enterprise 
Infrastructure Services, IT architecture, Enterprise Applica on Services, and other technology and business 
func ons. Addi onally, the role requires familiarity with recent threats and adversarial techniques, as well as the 
ability to quickly understand complex environments. 
 Able to take highly technical requirements & create easy to understand, complete standard opera ng Procedures. 
 Knowledge of other Security Technologies like CASB, DLP, MS Defender & Phishing Emails analysis. 
 Exposure to cloud security (AWS, Azure, GCP) and hybrid environments. 

Qualifications

 EDR Analyst, SIEM Monitoring & Inves ga on, M365 Security Alert Inves ga on, Incident Analysis & Response, Threat Hun ng,

 Threat Intel. 5+ Years of Security domain experience with minimum of 4+ years of SOC analyst. Experience with scrip ng (Python, PowerShell) for automa on, Phishing analysis, CASB & DLP alerts inves ga on and threat analysis is an advantage.