Job detail for Splunk ES Administrator

Company Description

Meritis is a consulting firm specializing in digital transformation of organizations, founded in 2007 by Sébastien Videment.

Initially based in Paris, it has expanded to regions and now has a presence in the largest cities in France: Sophia-Antipolis, Montpellier, Nantes, Bordeaux, Lyon, Aix-en-Provence, Lille and even in Lisbon, Portugal since 2023.

Our experts support clients from various sectors with all their digital transformation needs across numerous areas of expertise: Finance, Software Engineering, Cloud & Infrastructure, Data, Digital Transformation and Cybersecurity.

With its values of rigor, humility, benevolence and proximity, the firm of +900 employees, awarded 5 times in the Great Place To Work® rankings, is experiencing very strong growth and aims to reach €100M in revenue in 2024 and surpass the symbolic milestone of 1000 employees.

We are committed to being close to our employees and supporting them in a personalized manner regardless of their role in the company. Certified Great Place To Work since 2013, our approach to workplace well-being goes far beyond a simple label; our employees speak about it best: https://www.glassdoor.fr/Avis/Meritis-Avis-E1163008.htm

Job Description

As part of strengthening our security team, we are looking for an Information Security Administrator specialized in Splunk Enterprise Security (Splunk ES).

You will be responsible for administering, operating and evolving the Splunk ES platform, working closely with CSIRT teams to support security incident detection and response activities.

• Administer and operate the Splunk Enterprise Security (Splunk ES) platform.
• Ensure operational and security maintenance of the solution.
• Monitor platform performance, availability and reliability.
• Participate in tool evolution and optimization (use cases, detection rules).
• Collaborate with CSIRT teams to improve incident detection and response capabilities.
• Analyze security logs and events to identify abnormal behaviors.
• Participate in security incident management and associated investigations.
• Manage ticketing and produce intervention reports.
• Implement security and operational best practices.
• Participate in on-call duties (if necessary).

Qualifications

• Advanced proficiency in Splunk Enterprise Security (Splunk ES) (mandatory requirement).
• Excellent command of SPL (Search Processing Language).
• Experience in administering and operating SIEM tools.
• Good knowledge of cybersecurity practices (SOC, detection, incident response).
• Ability to analyze large volumes of logs and extract relevant alerts from them.
• Knowledge of IT environments (systems, networks, security).
• Experience collaborating with CSIRT / SOC teams appreciated.
• Rigor, responsiveness, autonomy and analytical ability.
• Good communication and team spirit.
• Fluent English required (written and oral).

Additional Information

• Customized career paths (career development, tailored training, mentoring…);
• Choice of your assignment and personalized support throughout your career;
• Evolve in an environment where learning is encouraged: certification training, e-learning, meetups, coding competitions, career development paths etc;
• Be part of expert communities that share their knowledge and experience within our centers of excellence;
• A friendly environment with many festive events (annual evening, seminars & team building, lunches and after-work gatherings…);

Your differences are our strengths. This is why Meritis is committed to diversity and non-discrimination. All our positions are accessible to people with disabilities. If you have any questions or believe you are a victim or witness of discrimination, you can contact ethiquegroup@meritis.fr.