Security Manager

Job purpose

We are looking for a passionate Security Manager to join our newly established Security Manager team. This is a unique moment to be part of something new, as you will be part of shaping and forming the team, its ways of working, culture and practices.

As an Security Manager, you will be the trusted operational and technical partner for your customers. You will be accountable for the MSS delivery, closely collaborating with our SOC and MSS Engine to ensure strong detection coverage and effective response capabilities. You will ensure a consistent and cohesive delivery across all our MSS service offerings aligned to customer.

You will be the trusted security advisor, owning the outcomes and ensuring continuous improvement of each customer's security posture, while managing efficiency.

What You'll Do

• Be the primary technical point of contact for your customers in all security related topics. Supporting in technical and architectural discussions, governance meetings and executive briefings

• Own the Continuous Threat Exposure Management (CTEM) cycle and Drive exposure and posture management programs, remediation and improvement roadmap

• Coordinate blue/purple team exercises and Breach Attack Simulations (BAS) to identify and close potential gaps

• Deliver and present actionable reporting such as recurring CTEM reports, posture roadmaps and strategic business packs

• Drive tuning and automation initiatives to improve efficiency and delivery cost

• Maintain technical knowledge of security products and their roadmaps to advise on new features and functionalities

• Stay current through internal Cyber Threat Intelligence (CTI) reports, proactively research emerging threats, and ensure your customers receive timely and relevant intelligence

• Support in the collection of evidence and reporting required for customer audits and certification processes

What We're Looking For

Technical Skills

• Strong technical background with the ability to proactively drive security posture improvement

• Deep knowledge and understanding of core networking Infrastructure Technology (IT) and Operation Technology (OT) concepts such as firewalls, IDS/IPS, VPN’s, Load Balancers, Proxies.

• Experience with security frameworks such as MITRE, NIST, CIS or ISO 27001

• Hands-on experience handling cases related to security events and incident response

• Strong experience in SIEM/SOAR/XDR security tools

  • Microsoft Defender and Microsoft Sentinel

• Preferably knowledge with Zero Trust Security platforms

• Experience developing indicators/detection rules in SIEM and XDR

• Experience with vulnerability management, exposure management and security risk assessment. i.e. Ability to analyze and interpret security configurations and vulnerabilities, and recommend suitable advisories

• Experience engaging with red or blue team exercises to assess attack paths, validate defensive controls, and enhance monitoring and incident response capability

• Experience writing and executing Incident Response Procedures and security incident playbooks

Advisory and Leadership

• Excellent communication skills, able to present to both technical teams and C-level

• Ability to lead by influence and collaboration across technical and operational teams

• Business acumen

At Orange, only your skills matter.

Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.
Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have.