Senior Information Security Analyst

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic and labelling is accurate.

The Eurofins network of companies believes that it is a global leader in food, environment, pharmaceutical and cosmetic product testing and in discovery pharmacology, forensics, advanced material sciences and AgroScience contract research services. It is also one of the market leaders in certain testing and laboratory services for genomics, and in the support of clinical studies, as well as in biopharma contract development and manufacturing. It also has a rapidly developing presence in highly specialised and molecular clinical diagnostic testing and in-vitro diagnostic products.

In over 37 years, Eurofins has grown from one laboratory in Nantes, France to over 65,000 staff across a decentralised and entrepreneurial network of more than 950 laboratories in over 1,000 companies across 59 countries. Eurofins companies offer a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products.

In 2024, Eurofins generated total revenues of EUR 6.95 billion; and has been among the best performing stocks in Europe over the past 20 years.

Eurofins is expanding its Security Operations Centre (SOC) and is looking to strengthen the SOC Consultant (SOC IR L3) Incident Response team. In this role, you will handle the most complex security incidents, leading deep investigations and driving effective remediation actions.

As a SOC IR L3 Consultant, you will play a key role in the Security Incident Management process—leading resolution efforts, collaborating with cross-functional teams, and applying your expertise to continuously improve the organization’s overall security posture.

Requirements:

Technical Expertise

• 5+ years of experience in SOC, Incident Response, DFIR (Digital Forensics and Incident Response), Threat Hunting, or Security Operations.
• Deep understanding of:
  • Windows, Linux, and Active Directory
  • Networking (TCP/IP, DNS, HTTP/S, SMTP, VPN, RDP)
  • Cloud security (Azure, M365, AWS, or GCP)
  • Identity and Access Management
  • Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC and TTP analysis.

Incident Response

• Lead and conduct end-to-end investigations and containment, eradication, recovery, and lessons-learned activities.
• Coordinate major incidents with technical and business stakeholders.
• Develop and maintain SOC procedures and processes
• Conduct host-based and network-based forensic analysis
• Ability to conduct memory investigation and malicious code investigation

Digital Forensics & Malware Analysis

• Memory forensics (Volatility).
• Knowledge from appropriate forensic data acquisition tools (FTK, Autopsy, EnCase, X-Ways).
  • Windows artifact analysis (Prefetch, Event Logs, Registry etc.)
  • Malware triage and reverse-engineering fundamentals.
• Ability to determine root cause and attack path.

Endpoint & Network Security

• Experience with EDR solutions
• Ability to investigate network logs

Soft Skills

• Excellent analytical and problem-solving skills.
• Ability to work independently during critical incidents.
• Strong high-level communication
• Ability to write executive-level incident reports and post-incident reports.

Leadership Expectations

• Mentor L1/L2 analysts.
• Lead and conduct investigations with minimal supervision.
• Drive improvements in detection capabilities and incident readiness.
• Develop playbooks, procedures, and response processes