Security Architect

About the role

Atos Group is seeking an experienced SOC Administrator / Senior SOC Analyst to join a customer site as a senior technical security resource. The role focuses on managing ArcSight SIEM operations, supporting L1/L2 analysts, conducting advanced investigations, and guiding the customer on security‑operations decisions.

Key responsibilities

• Administer ArcSight ESM, ArcSight Logger, Elastic Search, SmartConnectors, content packs, rules, dashboards, reports, and correlation use cases.
• Monitor SIEM health, event flow, EPS utilization, storage, parsing quality, and log source availability.
• Troubleshoot log ingestion issues, connector failures, parsing errors, and rule performance problems.
• Perform SIEM tuning to reduce false positives and improve detection accuracy.
• Develop and maintain SIEM content, including correlation rules, dashboards, reports, threat use cases, and alert workflows.
• Onboard new log sources such as network devices, servers, cloud platforms, EDR, AV, IAM, and application logs.
• Maintain documentation for SIEM architecture, log source inventory, use cases, SOPs, escalation matrix, and operational runbooks.
• Conduct deep‑dive analysis of security alerts, malware detections, endpoint events, cloud events, and network anomalies.

Required profile

• Several years of hands‑on experience with ArcSight SIEM administration and SOC operations.
• Strong background in incident investigation, threat hunting, and security solutioning.
• Customer‑facing attitude with clear communication and the ability to take initiative.
• Senior‑level expertise, capable of guiding L1/L2 analysts and advising on security‑operations decisions.

Required skills

• ArcSight ESM & Logger
• Elastic Search
• SmartConnectors and content pack management
• SIEM tuning and correlation rule development
• Log source onboarding (network, server, cloud, EDR, AV, IAM)
• Incident response and threat hunting
• Dashboard and report creation