Where is the SOC analyst role at Contentsquare located?

The SOC analyst position at Contentsquare is based in Paris Area, France. This is an on-site position.

What type of employment is the SOC analyst role at Contentsquare?

The SOC analyst position at Contentsquare is a Full time role.

What skills are required for the SOC analyst role at Contentsquare?

Key skills for the SOC analyst position at Contentsquare include: aws, azure, ci/cd, github, large language models, python.

SOC analyst — Contentsquare

Contentsquare is the all-in-one experience intelligence platform designed to be easily used by anyone who cares about digital journeys. With our flexible and scalable platform, organizations quickly get a deep understanding of their customers’ whole online journey.

We are a global leader in the experience analytics space, with a growing presence across 15 offices worldwide. We’re here to stay—and we’re looking for team members who are excited to drive impact and help us scale even further.

Our aim is to create an inclusive workplace where everyone learns and succeeds. Contentsquare has built a community of individuals who are daring, understanding, and deliberate. We invite you to join us in making the complex simpler—for our customers, their customers, and each other.

Important note: Be careful of scammers pretending to be from Contentsquare. We will never ask for money or contact you through random texts. Any communication from our in house Talent Acquisition team will only ever come from our contentsquare.com or @contentsquare-ext.com domain. For more information, visit our careers blog.

Contentsquare is looking for a SOC Analyst to join our Development, Security, and Operations Team (DevSecOps). Reporting directly to a Senior Cybersecurity Engineer, you will be the first line of defense in our Security Operations Center, playing a vital role in detecting, analyzing, and responding to cyber threats across our entire global infrastructure.

Contentsquare provides a globally leading SaaS service and commits to the highest security standards for its customers. We are ISO 27001 and ISO 27701 certified and maintain robust security initiatives (SOC 2 Type 2 report, private bug bounty program, SIEM, advanced security awareness, etc.). Working alongside other cybersecurity experts, your mission will be to ensure the integrity of our products and keep our users safe by actively monitoring our environments and mitigating active threats.

Key Responsibilities

As a core operational member of the DevSecOps Team, you will be responsible for the day-to-day monitoring and initial response to security alerts. Your responsibilities include:

Alert Triage & Investigation: Monitor, triage, and investigate security alerts daily (including phishing alerts) using our central SIEM (Google SecOps). You will act as the first responder to qualify events, filter out false positives, proactively look for remediation, and collaborate with internal teams to resolve issues quickly, in addition to escalating confirmed incidents to Senior Analysts (N2/N3).
Multi-Source Threat Monitoring: Analyze logs and security events across our diverse, modern ecosystem, including:
- Cloud infrastructure logs via AWS CloudTrail and Azure Activity Logs.
- Endpoint and cloud workload telemetry via CrowdStrike (EDR + CNAPP).
- Identity, access, and collaboration events from Okta and Google Workspace.
- Code repository and CI/CD security alerts from GitHub.
- Incident Response & On-Call Rotation: Participate in the investigation of security breaches. To ensure 24/7 protection of our global platform, you will take part in an on-call rotation to handle critical security incidents outside of regular business hours.
- Playbook Optimization: Assist in continuously improving our detection capabilities by documenting your findings, updating SOC playbooks, and suggesting rule-tuning to reduce alert fatigue.
- Vulnerability & Threat Tracking: Monitor and follow up on vulnerability resolution actions and stay informed about the latest threat landscape and common attack vectors.
- AI/LLM Incident Augmentation: Optimize and augment incident response capabilities by leveraging AI and LLM-based agentic workflows to automate data enrichment, accelerate threat investigation, and improve response efficiency.

Desired Skills and Attributes

Education & Experience

You hold a Bachelor’s or Master’s degree (Bac +5) in IT, Cybersecurity, or equivalent training.
You have initial experience (0 to 3 years, including internships or work-study programs) in an IT security role, ideally within a SOC.

Technical Competencies

Cloud & Environments: Familiar with modern cloud applications and environments. Good grasp of cloud computing architectures (AWS/Azure) and their associated security risks.
Security Monitoring: Basic understanding of how to query and analyze logs within a SIEM (experience with Google SecOps, or similar SIEM is a plus).
Endpoint Security: Familiarity with Endpoint Detection and Response (EDR) solutions and cloud native application protection platforms (CrowdStrike preferred).
Identity & Network Basics: Strong knowledge of web protocols, common attacks (OWASP), and identity management systems (Okta, SSO, MFA).
Scripting: Basic scripting skills (Python, Bash) to help automate repetitive triage tasks or data enrichment are highly appreciated.

Soft Skills

Analytical & Calm: You demonstrate strong analytical skills, attention to detail, and the ability to stay calm and methodical during high-pressure security incidents.
Availability: You are willing and able to participate in an on-call schedule (weekends) to support our 24/7 security posture.
Team Player: You enjoy working collaboratively in a team while being autonomous in your daily triage tasks.
Fluent in English (both written and spoken). French is a strong plus.

Location

In our Paris office (Headquarters), France.

SOC analyst

Job description