# CSIRT L3 Relay – Cybersecurity Operational Coordinator at Sopra Steria

Sopra Steria is hiring a CSIRT L3 Relay – Cybersecurity Operational Coordinator in Toronto, Canada. Level rates it Little AI ●○○○; you can [apply on Sopra Steria](https://jobsbylevel.com/go/b93f84bf-f602-42af-9d43-ccf8b222e49c?utm_medium=ai-agent).

AI Level 1, AI centrality 38 out of 100. Toronto, ON, Canada.

## Details

- Company: [Sopra Steria](https://jobsbylevel.com/companies/sopra-steria)
- AI level: AI Level 1 (score 38 out of 100)
- Location: Toronto, ON, Canada
- Posted: November 13, 2026
- Apply: https://jobsbylevel.com/go/b93f84bf-f602-42af-9d43-ccf8b222e49c?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=csirt-l3-relay-cybersecurity-operational-coordinator-at-sopra-steria-df7bb2

## Description

Sopra Steria is a European leader in consulting, digital services, and software development, supporting its clients in their digital transformation through innovative and collaborative solutions. With 51,000 employees in nearly 30 countries and revenue of €5.6 billion in 2025, we are committed to achieving sustainable results and placing people at the heart of technology. The world is how we shape it. For more information, visit us at www.soprasteria.ca. Are you ready to take on the challenge with us? Sopra Steria Infrastructure & Security Services (I2S) is a subsidiary of Sopra Steria specializing in infrastructure, cloud, and cybersecurity solutions. With 3,000 experts, I2S plays a key role in delivering the group’s end‑to‑end services. Our model is built around a strong client‑centric approach: the proximity and agility of our 8 regional agencies combined with the industrial strength of our offshore service centers. This enables us to deliver tailored, high‑quality solutions that align with each client’s unique needs and ambitions. The CSIRT L3 Relay acts as a Level 3 (N3) cybersecurity operational coordinator and CSIRT support relay for large enterprise clients. Working closely with central SOC/CSIRT teams, this role strengthens local operational support, accelerates response to complex or critical incidents, and provides expert guidance when needed. The role also supports collaboration across business, functional, and technical teams, ensuring effective escalation management, mitigation tracking, and incident coordination. Key Responsibilities: Operational Coordination & Proximity Act as the local cybersecurity contact for client sites Maintain strong operational proximity with onsite teams Liaise between local stakeholders and central SOC/CSIRT teams Incident & Escalation Management Coordinate incident escalations and expert support Track mitigation, remediation, and corrective actions Advanced Incident Response Support Support complex or critical cybersecurity incidents Lead or assist response, remediation, and recovery activities Align technical risks with business and operational priorities Crisis Management Provide expert support and coordinate response during major incidents or cyber crises Requirements Translation & Solution Alignment Translate business needs into cybersecurity requirements and global solutions Support continuous improvement of detection and response processes Communication & Continuous Improvement Ensure clear two-way communication between local and central teams Promote knowledge sharing, best practices, and service quality improvements Required Skills: Strong knowledge of cybersecurity operations, SOC/CSIRT environments, and incident response Experience coordinating technical and non-technical stakeholders Skilled in incident management, escalation handling, and mitigation tracking Ability to translate business needs into technical cybersecurity requirements Strong communication, facilitation, and coordination skills Autonomous, proactive, and solution-oriented mindset Hands-on experience with SIEM platforms such as Microsoft Sentinel, QRadar, or Splunk/ELK Experience with EDR solutions such as CrowdStrike and/or Microsoft Defender Preferred certifications: GCIH, GCFE/GCFA, or Microsoft SC-200 English required; French is an asset Bachelor’s degree in Cybersecurity, IT, or a related field, or equivalent experience Nice to have skills: Experience with Logic Apps, SOAR platforms, or threat intelligence tools such as MISP or OpenCTI Additional certifications such as CISSP, CISM, GREM, CEH, or CHFI Experience in large enterprise environments or IT/OT boundary contexts Background in OT/ICS security or 24/7 SOC environments At Sopra Steria, we’re proud to be an equal opportunity employer and to nurture a workplace where everyone feels welcome, respected, and supported. We are committed to fighting all forms of discrimination and building an environment where every individual can thrive. We warmly

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/csirt-l3-relay-cybersecurity-operational-coordinator-at-sopra-steria-df7bb2

Source: https://jobsbylevel.com/jobs/csirt-l3-relay-cybersecurity-operational-coordinator-at-sopra-steria-df7bb2

## Cite this page

Level. https://jobsbylevel.com/jobs/csirt-l3-relay-cybersecurity-operational-coordinator-at-sopra-steria-df7bb2.

Get job alerts: https://jobsbylevel.com/newsletter