Cybersecurity Specialist

About the company

Orange Business is a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.

Responsibilities

• Provide 24/7 cybersoc support to customers.
• Plan, implement, configure, and migrate market-leading cyber security solutions (Qradar, Sentinel, Arbor, Qualys, etc.).
• Create and implement new SIEM use cases (correlation rules), fine-tuning, DDOS managed objects, and Qualys solutions.
• Configure, onboard, and parse new log sources in SIEM solutions; create new managed objects; define thresholds in DDOS solutions.
• Work on malware analysis, mail analysis, and Qualys scanning.
• Classify and investigate alarms from different threat detection platforms and provide processed results to customers.
• Assess the effects of an attack, take initial measures, and make concrete recommendations for action.
• Improve response plans and incident playbooks.
• Detect anomalies and attack patterns at all stages of the cyber kill chain.
• Perform tool-based and manual threat hunting to detect attacks after zero-day exploits or vulnerabilities with potentially severe impact on customer environments.
• Create security reports based on security incidents within the reporting period.
• Develop reports and dashboards.
• Ensure adherence to and implementation of best incident response procedures as well as internal and industry standards.
• Participate in on-call duty to ensure incident response outside of business hours.

Requirements

• Degree or diploma holders with cybersecurity knowledge.
• Excellent verbal and written communication skills in English.

Skills

Mandatory

• Good hands-on experience with SIEM tools like Qradar and Sentinel.
• Knowledge of Microsoft Defender.
• Knowledge of DDOS service and mitigation methodology.
• Experience in incident handling and response.
• Certification in IBM Qradar SOC Analyst/Administrator or SC-200.

Secondary

• Knowledge of Python or any scripting language.
• Malware investigation and reporting.
• Forensic investigation of SPAM/phishing email incidents.
• Knowledge of Qualys and Crowdstrike (added advantage).

Benefits

• Global opportunities: Work in multinational teams and collaborate with colleagues and customers worldwide.
• Flexible work environment: Flexible working hours and hybrid work options (office and home).
• Professional development: Access to training programs and upskilling/reskilling opportunities.
• Career growth: Internal mobility and growth opportunities within Orange.
• Caring and daring culture: Health and well-being programs, diversity and inclusion initiatives, CSR, and employee connect events.
• Reward programs: Employee Referral Program and Change Maker Awards.