Job purpose
We are looking for a passionate Security Manager to join our newly established Security Manager team. This is a unique moment to be part of something new, as you will be part of shaping and forming the team, its ways of working, culture and practices.
As an Security Manager, you will be the trusted operational and technical partner for your customers. You will be accountable for the MSS delivery, closely collaborating with our SOC and MSS Engine to ensure strong detection coverage and effective response capabilities. You will ensure a consistent and cohesive delivery across all our MSS service offerings aligned to customer.
You will be the trusted security advisor, owning the outcomes and ensuring continuous improvement of each customer's security posture, while managing efficiency.
What You'll Do
Be the primary technical point of contact for your customers in all security related topics. Supporting in technical and architectural discussions, governance meetings and executive briefings
Own the Continuous Threat Exposure Management (CTEM) cycle and Drive exposure and posture management programs, remediation and improvement roadmap
Coordinate blue/purple team exercises and Breach Attack Simulations (BAS) to identify and close potential gaps
Deliver and present actionable reporting such as recurring CTEM reports, posture roadmaps and strategic business packs
Drive tuning and automation initiatives to improve efficiency and delivery cost
Maintain technical knowledge of security products and their roadmaps to advise on new features and functionalities
Stay current through internal Cyber Threat Intelligence (CTI) reports, proactively research emerging threats, and ensure your customers receive timely and relevant intelligence
Support in the collection of evidence and reporting required for customer audits and certification processes
What We're Looking For
Technical Skills
Strong technical background with the ability to proactively drive security posture improvement
Deep knowledge and understanding of core networking Infrastructure Technology (IT) and Operation Technology (OT) concepts such as firewalls, IDS/IPS, VPN’s, Load Balancers, Proxies.
Experience with security frameworks such as MITRE, NIST, CIS or ISO 27001
Hands-on experience handling cases related to security events and incident response
Strong experience in SIEM/SOAR/XDR security tools
Preferably knowledge with Zero Trust Security platforms
Experience developing indicators/detection rules in SIEM and XDR
Experience with vulnerability management, exposure management and security risk assessment. i.e. Ability to analyze and interpret security configurations and vulnerabilities, and recommend suitable advisories
Experience engaging with red or blue team exercises to assess attack paths, validate defensive controls, and enhance monitoring and incident response capability
Experience writing and executing Incident Response Procedures and security incident playbooks
Advisory and Leadership
Excellent communication skills, able to present to both technical teams and C-level
Ability to lead by influence and collaboration across technical and operational teams
Business acumen
At Orange, only your skills matter.
Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.
Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have.
