SIEM Administrator - Cybersecurity - Toulouse

Role Summary

Your future work environment

You will join the Security Operation Services (SOS) division within the Digital Platform service of our Toulouse and Rennais Cybercenter, and become an active member in the design, deployment and maintenance of SIEM infrastructures and resources (SPLUNK, QRADAR, XSIAM, SEKOIA, etc.) allowing the implementation of data collection platforms to ensure the security of the various clients of the Sopra Steria Cybercenter.

• Your role and missions
• Within the Solution team, your activities revolve around the following subjects:
• You operate in an international and multi-client environment with a multitude of constantly evolving SIEM infrastructure
• You designate solutions, design and implement infrastructure, SIEM systems and applications and log sinks
• You carry out the BUILD and RUN of SIEM security solutions (infrastructure deployment, data ingestion, implementation of supervision, incident monitoring, etc.)

You maintain SIEM security infrastructures and resources in operational and security conditions (MCO/MCS) (resource management, patch management, collection management, migrations, etc.)

You supervise infrastructures and you intervene on production incidents (restoration of the detection service, restoration of collection in the context of loss of logs, improvement of supervision following feedback from the incident, etc.)

• You provide support to project teams on complex points relating to your area of expertise
• You rely on automation solutions to improve the service and industrially deploy configurations and infrastructures
• You support customers on a daily basis in order to collect the right data in a relevant manner (protocol, data format, collection architecture, etc.)
• You apply and develop good business and security practices
• You propose and implement continuous improvement of tools and processes
• You participate in responses to Call for Tenders in order to propose solutions that will best meet the client's specifications

Requirements

• Graduate of an engineering school or equivalent, you benefit from significant experience in the integration, administration and operational maintenance of security alert detection solutions, as well as in the administration of Information Systems.
• You have an interest in the field of Cybersecurity!
• With strong adaptability and the ability to resolve complex issues in sensitive environments, you have recognized writing skills, a good analytical mind and a sense of service.
• You have a fluent level of English, both written and spoken.

Do you want to work on projects that combine technical challenges, new technologies and innovation? Join a company that engages in national and international communities to influence the development of cyber norms and standards. Sopra Steria is the first member of the Miter Affiliate Program in Europe, and actively participates in OASIS and InterCERT.

Benefits

Technical environment

• SIEM: SPLUNK, IBM QRadar, Microsoft Azure Sentinel, SEKOIA, Palo Alto XSIAM (architecture, administration, collection management, updating, dashboarding, etc.)
• Log wells: Rsyslog, ELK, Syslog-ng Store Box
• System: Linux (Red Hat, Ubuntu 24)
• Automation: Ansible, GitLab/GitHub, Terraform
• Supervision: Zabbix, Centreon
• Cloud: Azure, AWS, Outscale, OVH
• What we offer you
• A teleworking agreement to telework up to 2 days per week depending on your missions.
• An interesting benefits package: mutual insurance, a CSE, restaurant vouchers, a profit-sharing agreement, vacation bonuses and co-optation.
• Multiple career opportunities: more than 30 job families, so many pathways to imagine together.
• Hundreds of training courses to develop your skills and evolve within the Group.
• Independent training platforms to prepare for your certifications and support your personal development.
• The possibility of getting involved with our foundation or our partner “Friday”.
• The opportunity to join the Tech'Me UP collective (training, conferences, monitoring, and much more...).
• An inclusive and committed employer, our company works every day to fight against all forms of discrimination and promote a respectful working environment. This is why, committed to diversity and diversity, we encourage all applications and all profiles.
• https: //www.soprasteria.fr/nous-connaitre/nos-engagements

About the Company

About Sopra Steria

Sopra Steria, a major player in Tech in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, services and digital solutions activities. It helps its clients carry out their digital transformation and obtain concrete and lasting benefits. The Group provides a global response to the competitiveness challenges of large companies and organizations, by combining in-depth knowledge of sectors of activity and technologies with a collaborative approach. Sopra Steria places people at the heart of its action and is committed to its clients to make the most of digital technology to build a positive future. In 2025, the Group achieved a turnover of 5.6 billion euros.

• The world is how we shape it*
• Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN code: FR0000050809
• For more information, find us at www.soprasteria.com/fr
• *The world is as we make it

Sopra Steria's Cybersecurity Business Line is present in Europe with more than 2,500 experts - more than half of whom are in France - our mission is to provide trusted solutions and services to the most exposed public and private actors to ensure the resilience of their critical systems and protect their sensitive digital assets.

Beyond the strong European presence, the cybersecurity division is positioning itself and developing in North America (Toronto), as well as in Asia Pacific (Singapore).

We offer 3 areas of offering: Prevention, Protection & detection and response. These 3 areas work together to provide our customers with consistent information and decision-making capabilities informed by operational reality. This approach is based on our transversal methodology centered on Miter Att&ck.

Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience to cyberattacks and accelerate your digital transformation.

An end-to-end trusted solution

A “security by design” approach focused on business risks and transversal to the organization.

A commitment to the development of innovative sovereign solutions.

Each individual can have an impact on responding to these new cyber risk challenges. Everyone contributes both individually and collectively to securing our clients and society while maintaining personal and professional growth.