SOC analyst

Contentsquare is the all-in-one experience intelligence platform designed to be easily used by anyone who cares about digital journeys. With our flexible and scalable platform, organizations quickly get a deep understanding of their customers’ whole online journey. We are a global leader in the experience analytics space, with a growing presence across 15 offices worldwide. We’re here to stay—and we’re looking for team members who are excited to drive impact and help us scale even further. Our aim is to create an inclusive workplace where everyone learns and succeeds. Contentsquare has built a community of individuals who are daring, understanding, and deliberate. We invite you to join us in making the complex simpler—for our customers, their customers, and each other. Important note: Be careful of scammers pretending to be from Contentsquare. We will never ask for money or contact you through random texts. Any communication from our in house Talent Acquisition team will only ever come from our contentsquare.com or @contentsquare-ext.com domain. For more information, visit our careers blog.

Contentsquare is looking for a SOC Analyst to join our Development, Security, and Operations Team (DevSecOps). Reporting directly to a Senior Cybersecurity Engineer, you will be the first line of defense in our Security Operations Center, playing a vital role in detecting, analyzing, and responding to cyber threats across our entire global infrastructure. Contentsquare provides a globally leading SaaS service and commits to the highest security standards for its customers. We are ISO 27001 and ISO 27701 certified and maintain robust security initiatives (SOC 2 Type 2 report, private bug bounty program, SIEM, advanced security awareness, etc.). Working alongside other cybersecurity experts, your mission will be to ensure the integrity of our products and keep our users safe by actively monitoring our environments and mitigating active threats.

Key Responsibilities As a core operational member of the DevSecOps Team, you will be responsible for the day-to-day monitoring and initial response to security alerts. Your responsibilities include:

Alert Triage & Investigation: Monitor, triage, and investigate security alerts daily (including phishing alerts) using our central SIEM (Google SecOps). You will act as the first responder to qualify events, filter out false positives, proactively look for remediation, and collaborate with internal teams to resolve issues quickly, in addition to escalating confirmed incidents to Senior Analysts (N2/N3).

Multi-Source Threat Monitoring: Analyze logs and security events across our diverse, modern ecosystem, including:

Cloud infrastructure logs via AWS CloudTrail and Azure Activity Logs.

Endpoint and cloud workload telemetry via CrowdStrike (EDR + CNAPP).

Identity, access, and collaboration events from Okta and Google Workspace.

Code repository and CI/CD security alerts from GitHub.

Incident Response & On-Call Rotation: Participate in the investigation of security breaches. To ensure 24/7 protection of our global platform, you will take part in an on-call rotation to handle critical security incidents outside of regular business hours.

Playbook Optimization: Assist in continuously improving our detection capabilities by documenting your findings, updating SOC playbooks, and suggesting rule-tuning to reduce alert fatigue.

Vulnerability & Threat Tracking: Monitor and follow up on vulnerability resolution actions and stay informed about the latest threat landscape and common attack vectors.

AI/LLM Incident Augmentation: Optimize and augment incident response capabilities by leveraging AI and LLM-based agentic workflows to automate data enrichment, accelerate threat investigation, and improve response efficiency.

Desired Skills and Attributes Education & Experience

You hold a Bachelor’s or Master’s degree (Bac +5) in IT, Cybersecurity, or equivalent training.

You have initial experience (0 to 3 years, including internships or work-study programs) in an IT security role, ideally within a SOC.

Technical Competencies

Cloud & Environments: Familiar with modern cloud applications and environments. Good grasp of cloud computing architectures (AWS/Azure) and their associated security risks.

Security Monitoring: Basic understanding of how to query and analyze logs within a SIEM (experience with Google SecOps, or similar SIEM is a plus).

Endpoint Security: Familiarity with Endpoint Detection and Response (EDR) solutions and cloud native application protection platforms (CrowdStrike preferred).

Identity & Network Basics: Strong knowledge of web protocols, common attacks (OWASP), and identity management systems (Okta, SSO, MFA).

Scripting: Basic scripting skills (Python, Bash) to help automate repetitive triage tasks or data enrichment are highly appreciated.

Soft Skills

Analytical & Calm: You demonstrate strong analytical skills, attention to detail, and the ability to stay calm and methodical during high-pressure security incidents.

Availability: You are willing and able to participate in an on-call schedule (weekends) to support our 24/7 security posture.

Team Player: You enjoy working collaboratively in a team while being autonomous in your daily triage tasks.

Fluent in English (both written and spoken). French is a strong plus.

Location

In our Paris office (Headquarters), France.

Why you should join Contentsquare We invest in our people through career development, mentorship, social events, philanthropic activities, and competitive benefits. We are always assessing the perks we offer to ensure we’re aligned with the employees' needs. Here are a few we want to highlight:

• Virtual onboarding, Hackathon, and various opportunities to interact with your team and global colleagues both on and offsite each year
• Work flexibility: hybrid and remote work policies
• Generous paid time-off policy (every location is different)
• Lifestyle allowance
• A Culture Crew in every country we’re based in to coordinate regular activities for employees to get to know each other and bond outside of work
• Every full-time employee receives stock options, allowing them to share in the company’s success
• We have multiple Employee Resource Groups, that offer a safe space for individuals who share common identities, life experiences, or allyship to connect, support one another, and passionately advocate for the issues close to their hearts
• And more benefits tailored to each country Contentsquare is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. Your personal data is used by Contentsquare for recruitment purposes only. Read our Job Candidate Privacy Notice to find out more about data protection at Contentsquare and your rights. You can exercise your rights by using our dedicated Data Subject Rights Portal here. Your personal data will be securely stored in our hosting provider’s data center in Oregon (US west). We have implemented appropriate transfer mechanisms under applicable data protection laws. Contentsquare may use AI-assisted tools to help review and screen applications. All decisions involving hiring are made by human reviewers, and your personal data will be processed in accordance with our Candidate Privacy Policy.