Dataone

Cyber Security Operations Center (CSOC) Engineer

Casablanca-Settat

CDI / Temps pleinSur site1–3 ansAnglaisSécuritéInformatique / IT

L’essentiel du poste

Résumé par Postule AI

DataOne is seeking a CSOC Engineer to support continuous security operations across DATAONE and BSO systems, focused on threat detection, incident response, and security infrastructure engineering. The role works within a follow-the-sun SOC team based in Casablanca and Davao, using tools such as Wazuh, Bitdefender GravityZone, Fortinet, and TheHive. The engineer also supplies technical evidence and reports to the compliance team for audits. Candidates need 2–3 years of relevant experience and professional English.

Vos missions

  • Focus on threat detection, incident response, and security infrastructure engineering across DATAONE and BSO systems.
  • Maintain, tune, and optimize Wazuh for central logging, File Integrity Monitoring, and Host Intrusion Detection across Group infrastructure.
  • Manage and deploy Bitdefender GravityZone for endpoint protection and automated host isolation during incidents.
  • Configure and monitor Fortinet NGFW/WAF and Suricata network intrusion detection; secure remote access with NetBird and WireGuard.
  • Analyze IoCs via MISP and SOCRadar, and run scheduled scanning and CVE tracking with OpenVAS and VulnTracker.
  • Provide technical evidence, log extracts, and vulnerability reports to the compliance team to support group audits.

Profil recherché

  • You have 2–3 years of experience in SOC engineering, systems engineering, or infrastructure security.
  • You have hands-on experience with SIEM, EDR, firewall, or SOAR tools such as Wazuh, Bitdefender, Fortinet, or TheHive.
  • You are fluent in English, written and spoken, and can document technical findings for global teams and audits.
  • You can explain technical data clearly to non-technical stakeholders such as Compliance and Legal.

Généré automatiquement à partir de l’offre. Postule AI peut se tromper : vérifiez auprès de l’employeur.

About the Role & Vision

DataOne is expanding its global security capabilities to deliver continuous, expert-level security operations across all DATAONE and BSO systems. The security infrastructure is built on proven open-source technologies and enterprise solutions, and it is operated by a follow-the-sun team based in Casablanca and Davao.

The SOC team, orchestrated by the SOC Manager, focuses purely on detection, response, and cyber security infrastructure management. The team does not manage regulatory compliance directly, but the engineer acts as the technical enabler for governance goals by providing the technical evidence and reports the compliance team needs for successful audits.

Key Responsibilities

  • Core focus: threat detection, incident response, and security infrastructure engineering.
  • Audit & Compliance Support: Collect, organize, and provide technical evidence, log extracts, and vulnerability reports to the compliance team for group audits.
  • SIEM & Log Management: Maintain, tune, and optimize Wazuh for central logging, File Integrity Monitoring (FIM), and Host Intrusion Detection (HIDS).
  • Endpoint Defense: Manage and deploy Bitdefender GravityZone for endpoint protection, threat detection, and automated host isolation during incidents.
  • Perimeter & Network Security: Configure and monitor Fortinet NGFW/WAF; manage network intrusion detection using Suricata.
  • Zero Trust Architecture (ZTA): Administer and secure remote infrastructure access using NetBird and WireGuard.
  • Incident Response & Automation (SOAR): Orchestrate incident response workflows and automated enrichment using TheHive and Cortex.
  • Threat Intelligence & Vulnerability Management: Analyze Indicators of Compromise (IoCs) via MISP, Shadowserver, and SOCRadar; run scheduled scanning and CVE tracking with OpenVAS and VulnTracker.
  • Active Directory Auditing: Score risk and map attack paths using BloodHound and PingCastle, and follow up actions with AD Admins.
  • Data Protection: Assist in evaluating and implementing a future Data Loss Prevention (DLP) solution across DataOne and BSO systems.

Required Technical Tooling

Practical, hands-on engineering knowledge of the following technologies:

  • SIEM / HIDS: Wazuh
  • EDR / EPP: Bitdefender GravityZone
  • Firewall / WAF: Fortinet (FortiGate / FortiWAF)
  • ZTA / VPN: NetBird, WireGuard
  • SOAR / Case Management: TheHive, Cortex
  • Threat Intel: MISP, Shadowserver, SOCRadar
  • Vulnerability Assessment: OpenVAS, VulnTracker
  • AD Auditing: BloodHound, PingCastle
  • NIDS: Suricata
  • Anti DDOS

Qualifications & Requirements

  • Experience: Minimum of 2–3 years in SOC Engineering, Systems Engineering, or Infrastructure Security.
  • Language: Professional fluency in English (written and spoken) is mandatory.
  • Datacenter/Enterprise Experience: Prior experience securing data center, cloud infrastructure, or large-scale enterprise networks is highly valued.
  • Collaboration Skills: Proven ability to work with non-technical teams (such as Compliance and Legal) to deliver clear, actionable data.

Mise en forme par Postule ·

Signaler un problème