Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
Your Role
•Operate, maintain, and continuously improve SOC platforms including Microsoft Sentinel, Microsoft Defender XDR, SOAR, security data lakes, telemetry pipelines, threat intelligence platforms, OT/NSM monitoring solutions, and email security platforms.
•Manage Microsoft Sentinel/XDR workspaces, connectors, analytics rule deployment mechanisms, workbooks, watchlists, and platform configurations to ensure reliable security operations.
•Maintain telemetry ingestion and data processing components including Windows Event Forwarding, syslog infrastructure, Azure Monitor Agent, Azure Event Hub, Logstash/Cribl-style pipelines, and data routing or transformation services.
•Support SOAR platforms, automation workflows, integrations, playbooks, operational queues, CI/CD deployment pipelines, and infrastructure-as-code processes while ensuring platform stability and scalability.
•Monitor platform health, troubleshoot ingestion, alerting, automation, access, performance, and reporting issues, while supporting detection engineering, data onboarding initiatives, compliance requirements, upgrades, patching, and on-call platform operations.
Your Profile
•5+ years of experience in SIEM, security platform engineering, security operations, cloud infrastructure, or DevOps environments with strong troubleshooting and operational support expertise.
•Strong hands-on experience with SIEM platforms, preferably Microsoft Sentinel, including analytics rules, workspace administration, connector management, platform monitoring, and operational validation using KQL.
•Proven experience with log ingestion technologies including Syslog, Windows Event Forwarding, Azure Monitor Agent, Azure Event Hub, Logstash, Cribl, parsing, normalization, transformation, and telemetry pipeline management.
•Hands-on expertise with automation technologies such as Azure Logic Apps, Azure Functions, Python, PowerShell, Azure DevOps, Git, CI/CD pipelines, Infrastructure-as-Code, and Configuration-as-Code frameworks. · Strong understanding of Microsoft Defender technologies, Azure services, Azure Data Explorer, security data lakes, threat intelligence platforms, EDR/XDR solutions, email security, OT/NSM tooling, RBAC, API authentication, secrets management, compliance requirements, and enterprise security operations
What you will love working in Capgemini
•You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group.
•You will also get personalized career guidance from our leaders. You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
•At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges
Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.
Make it real | www.capgemini.com
