Senior SOC Analyst (ArcSight) – Security Operations

About the role

Atos Group is seeking an experienced Senior SOC Analyst to join a customer site as a key technical security resource. You will manage ArcSight SIEM operations, support L1/L2 analysts, conduct advanced investigations, and guide the customer on security‑operations decisions.

Key responsibilities

• Administer ArcSight ESM, ArcSight Logger, Elastic Search, SmartConnectors, content packs, rules, dashboards, reports, active channels, filters and correlation use cases.
• Monitor SIEM health, event flow, EPS utilization, storage, parsing quality and log source availability.
• Troubleshoot log ingestion, connector failures, parsing errors and rule performance issues.
• Perform SIEM tuning to reduce false positives and improve detection accuracy.
• Develop and maintain correlation rules, dashboards, reports, threat use cases and alert workflows.
• Onboard new log sources (network devices, servers, cloud platforms, EDR, AV, IAM, application logs).
• Document SIEM architecture, log inventory, SOPs, escalation matrix and runbooks.
• Conduct deep‑dive analysis of security alerts, malware detections, endpoint, cloud and network anomalies.

Required profile

• Strong hands‑on experience with ArcSight SIEM administration and SOC operations.
• Proven ability to lead incident investigations and perform threat hunting.
• Excellent communication skills and a customer‑focused attitude.
• Ability to work independently on‑site and guide junior analysts.

Required skills

• ArcSight ESM
• ArcSight Logger
• Elastic Search
• SmartConnectors
• SIEM administration and tuning
• Threat hunting
• Incident response
• Log source onboarding (network, server, cloud, EDR, AV, IAM)