Mission freelance SOC Expert - Cybersecurity

Context

Within the Group Information Security team as part of One trust Program (2024-2026) strategic program of Group Security),We are looking for the service of an external Security consultancy SOC cloud monitoring Contractor .The Service mission consists of providing a analysis based on economic impact and risk reduction to select SOC alerts to be activated on Azure subscriptions and AWS accounts.
This analysis will be performed under the management of an Information Security lead in charge of Cloud security monitoring requirements definition.

Scope of Service - The Service would be focused on:

- Analysing SOC alerts to be activated on Azure subscriptions and AWS accounts
o Analyse the playbooks and settings identified by the SOC (risk covered, pre-requisites, conifigurations, …)
o Analyze Azure and AWS offers to identify the costs associated to activate these settings
o Analyze costs for entities relying on FINOPS available at GO level and finetune with entities when necessary
- Provide a global synthesis risk versus cost to select the settings that should be mandatory or optionnal
- Providing follow-up inputs for steering committees
- Supporting client teams (IS, GO security, product teams, …) and entities on settings