📍 Job Overview

• Job Title: Expert(e) Sécurité du Cloud - Cybersécurité - Ile-de-France
• Company: Sopra Steria
• Location: Courbevoie, Île-de-France, France
• Job Type: Temps complet (Hybrid)
• Category: Sécurité du Cloud - Cybersécurité
• Date Posted: 2025-07-03
• Experience Level: 5-10 ans
• Remote Status: Hybrid (2 jours de télétravail par semaine)

🚀 Role Summary

• Sopra Steria, a leading European tech company, is seeking a skilled Cloud Security Expert to join their Infrastructure & Security Services division.
• The role involves protecting hybrid or multi-cloud environments, ensuring compliance, resilience, and security for clients' information systems.
• The ideal candidate will have a strong background in cloud architecture, security, and relevant certifications.

📝 Enhancement Note: This role requires a deep understanding of cloud environments, security standards, and risk analysis to effectively protect clients' information systems.

💻 Primary Responsibilities

• Risk Analysis: Identify risks and non-compliances in cloud projects and propose remediation plans.
• Cloud Security Strategy: Develop and maintain cloud security policies, including segmentation, encryption, and IAM/PAM.
• Architecture and Governance: Design and evaluate cloud architectures, ensuring they meet security standards (CNAPP, CASB, CSPM, EDR, etc.).
• Surveillance, Detection, and Response: Implement tools for detecting and responding to security incidents.
• Conseil, Accompagnement, et Formation: Advise and support clients and internal teams in adopting secure cloud practices.
• Capitalisation et Synergies: Identify and ensure synergies and capitalization of technical solutions between the company's activities.

📝 Enhancement Note: The role requires strong technical skills, adaptability, and the ability to work effectively with cross-functional teams.

🎓 Skills & Qualifications

Education: Bachelor's degree in Computer Science, Engineering, or a related field.

Experience: At least 5 years of experience in cloud architecture and security, with proficiency in various cloud environments (Azure, AWS, GCP, etc.).

Required Skills:

• Proficient in cloud environments (Azure, AWS, GCP, etc.)
• Knowledge of security standards (CNAPP, CASB, CSPM, EDR, etc.)
• Experience in risk analysis and compliance
• Strong communication and interpersonal skills
• Fluent in French (written and spoken)

Preferred Skills:

• Certifications: Microsoft SCCM 2012, Microsoft MS-101, Microsoft AZ-102, Microsoft AZ-900, Microsoft Sentinel / Microsoft Defender, AWS Certified Security - Specialty
• Knowledge of DevSecOps and CI/CD practices
• Experience in incident response and forensics
• Familiarity with security tools (SIEM, EDR, XDR, etc.)

📝 Enhancement Note: Candidates with relevant certifications and experience in emerging cloud security trends will be highly sought after for this role.

📊 Web Portfolio & Project Requirements

Portfolio Essentials:

• Case studies demonstrating cloud security expertise, including risk analysis, architecture design, and incident response.
• Examples of security policies and procedures developed for cloud environments.
• Documentation showcasing knowledge of security standards and best practices.

Technical Documentation:

• Detailed technical documentation for cloud security projects, including architecture diagrams, risk assessments, and incident response plans.
• Code samples or scripts demonstrating proficiency in cloud security tools and automation.

📝 Enhancement Note: A strong portfolio will highlight the candidate's ability to apply security principles to real-world cloud environments and effectively communicate complex security concepts.

💵 Compensation & Benefits

Salary Range: €55,000 - €70,000 per year (based on experience and market research)

Benefits:

• Health insurance
• Employee savings plan
• Meal vouchers
• Profit-sharing
• Vacation bonuses
• Referral bonuses
• Flexible work arrangement (2 days of remote work per week)

Working Hours: 40 hours per week, with flexible scheduling to accommodate project deadlines and maintenance windows.

📝 Enhancement Note: The salary range is estimated based on market research and the required level of experience for this role. Actual compensation may vary depending on the candidate's qualifications and the company's internal policies.

🎯 Team & Company Context

Company Culture:

• Sopra Steria is a global technology company with a strong commitment to diversity, inclusion, and work-life balance.
• The company encourages continuous learning and offers numerous training opportunities and certifications.
• Sopra Steria is involved in various cybersecurity communities and initiatives, such as OASIS and InterCERT.

Team Structure:

• The Cloud Security Expert will work within the Infrastructure & Security Services division, collaborating with various teams, including project managers, architects, and security specialists.
• The role involves both technical and strategic responsibilities, requiring strong communication and leadership skills.

Development Methodology:

• Sopra Steria follows Agile methodologies, with a focus on iterative development, continuous improvement, and customer value.
• The company uses various project management tools and methodologies to ensure efficient collaboration and delivery.

Company Website: Sopra Steria

📝 Enhancement Note: Sopra Steria's culture emphasizes collaboration, innovation, and continuous learning, providing an ideal environment for cloud security professionals to grow and develop their skills.

📈 Career & Growth Analysis

Cloud Security Career Level: This role is suitable for experienced cloud security professionals seeking to advance their careers in a dynamic, global organization.

Reporting Structure: The Cloud Security Expert will report directly to the manager of the Protect By Design value center and collaborate with various teams across the organization.

Technical Impact: The role involves making critical decisions regarding cloud security architecture, risk management, and incident response, directly impacting the security and resilience of clients' information systems.

Growth Opportunities:

• Technical Specialization: Deepen expertise in specific cloud security domains, such as identity and access management, incident response, or cloud security architecture.
• Leadership Roles: Develop leadership skills and take on more strategic responsibilities, such as managing teams or driving security initiatives.
• Global Opportunities: Explore international assignments or roles within Sopra Steria's global organization.

📝 Enhancement Note: Sopra Steria's diverse project portfolio and global presence offer numerous growth opportunities for cloud security professionals seeking to advance their careers in a challenging and innovative environment.

🌐 Work Environment

Office Type: Modern, collaborative workspace with dedicated areas for team meetings, workshops, and quiet work.

Office Location(s): Sopra Steria's Courbevoie office is easily accessible by public transportation, with nearby amenities and restaurants.

Workspace Context:

• Collaboration: The office fosters a collaborative environment, with open-plan workspaces and dedicated team areas.
• Technology and Tools: Sopra Steria provides modern hardware, software, and tools to ensure optimal productivity and efficiency.
• Flexibility: The hybrid work arrangement (2 days of remote work per week) offers flexibility and work-life balance.

Work Schedule: Standard work hours are from 9:00 AM to 6:00 PM, with flexible scheduling to accommodate project deadlines and maintenance windows.

📝 Enhancement Note: Sopra Steria's work environment encourages collaboration, innovation, and work-life balance, providing an ideal setting for cloud security professionals to thrive.

📄 Application & Technical Interview Process

Interview Process:

1. Online Assessment: A short online assessment to evaluate technical skills and problem-solving abilities.
2. Technical Phone Screen: A phone interview focused on cloud security concepts, risk analysis, and architecture design.
3. On-site Technical Interview: A face-to-face interview with hands-on exercises, case studies, and architecture design challenges.
4. Final Interview: A meeting with the hiring manager and other stakeholders to discuss career aspirations, cultural fit, and finalize the offer.

Portfolio Review Tips:

• Highlight cloud security projects that demonstrate a strong understanding of cloud environments, security standards, and risk analysis.
• Emphasize the ability to apply security principles to real-world cloud environments and effectively communicate complex security concepts.
• Prepare examples of security policies, procedures, and incident response plans developed for cloud environments.

Technical Challenge Preparation:

• Brush up on cloud security concepts, risk analysis, and architecture design principles.
• Practice hands-on exercises and case studies to refine problem-solving skills and architecture design abilities.
• Prepare for behavioral questions that assess communication, teamwork, and leadership skills.

📝 Enhancement Note: A well-prepared portfolio and strong interview performance will demonstrate the candidate's ability to effectively protect hybrid or multi-cloud environments and ensure compliance, resilience, and security for clients' information systems.

🛠 Technology Stack & Web Infrastructure

Cloud Environments:

• Azure, AWS, GCP, and other cloud service providers
• Proficiency in multiple cloud environments is essential for this role

Security Tools and Standards:

• CNAPP, CASB, CSPM, EDR, and other security tools
• Familiarity with security standards (ISO 27001, NIST, CIS, RGPD, SecNumCloud, etc.)

Development and DevSecOps Tools:

• Version control systems (Git, SVN, etc.)
• CI/CD pipelines and automation tools (Jenkins, GitLab CI/CD, etc.)
• Infrastructure as Code (Terraform, CloudFormation, etc.)
• Containerization and orchestration tools (Docker, Kubernetes, etc.)

📝 Enhancement Note: Proficiency in cloud security tools, standards, and best practices is essential for this role, as the Cloud Security Expert will be responsible for protecting hybrid or multi-cloud environments and ensuring compliance, resilience, and security for clients' information systems.

👥 Team Culture & Values

Cloud Security Values:

• Proactive Security: Anticipate and mitigate security threats before they impact clients' information systems.
• Collaboration: Work effectively with cross-functional teams, including project managers, architects, and security specialists.
• Continuous Learning: Stay up-to-date with emerging cloud security trends, tools, and best practices.
• Customer Focus: Understand clients' unique security requirements and tailor solutions to meet their specific needs.

Collaboration Style:

• Cross-functional Integration: Collaborate with various teams, including project managers, architects, and security specialists, to ensure security is integrated into all aspects of cloud projects.
• Code Review Culture: Participate in code reviews and knowledge-sharing sessions to ensure security best practices are followed.
• Technical Mentoring: Share expertise and knowledge with junior team members to help them develop their cloud security skills.

📝 Enhancement Note: Sopra Steria's culture emphasizes collaboration, innovation, and continuous learning, providing an ideal environment for cloud security professionals to grow and develop their skills.

⚡ Challenges & Growth Opportunities

Technical Challenges:

• Emerging Cloud Security Trends: Stay up-to-date with emerging cloud security trends and adapt security strategies to address new threats and vulnerabilities.
• Complex Cloud Environments: Design and implement security solutions for complex, hybrid, or multi-cloud environments.
• Regulatory Compliance: Ensure cloud environments comply with relevant security standards, regulations, and industry best practices.

Learning & Development Opportunities:

• Technical Training: Attend training sessions, webinars, and workshops to deepen knowledge of cloud security tools, standards, and best practices.
• Certification Programs: Pursue relevant certifications to demonstrate expertise and advance career prospects.
• Mentorship Programs: Participate in mentorship programs to develop leadership skills and gain insights into strategic decision-making processes.

📝 Enhancement Note: Sopra Steria's diverse project portfolio and global presence offer numerous challenges and growth opportunities for cloud security professionals seeking to advance their careers in a dynamic and innovative environment.

💡 Interview Preparation

Technical Questions:

• Cloud Security Concepts: Demonstrate a strong understanding of cloud security concepts, risk analysis, and architecture design principles.
• Security Tools and Standards: Show proficiency in various security tools, standards, and best practices.
• Incident Response: Describe incident response processes and demonstrate the ability to effectively manage security incidents.

Company & Culture Questions:

• Sopra Steria Culture: Explain how your values and work style align with Sopra Steria's collaborative, innovative, and customer-focused culture.
• Cloud Security Strategy: Discuss your approach to cloud security strategy, architecture design, and risk management.
• Teamwork and Leadership: Provide examples of your ability to work effectively with cross-functional teams and drive security initiatives.

Portfolio Presentation Strategy:

• Cloud Security Projects: Highlight cloud security projects that demonstrate a strong understanding of cloud environments, security standards, and risk analysis.
• Security Policies and Procedures: Present examples of security policies, procedures, and incident response plans developed for cloud environments.
• Architecture Design: Showcase your ability to design and implement secure cloud architectures that meet clients' unique requirements.

📝 Enhancement Note: A well-prepared portfolio and strong interview performance will demonstrate the candidate's ability to effectively protect hybrid or multi-cloud environments and ensure compliance, resilience, and security for clients' information systems.

📌 Application Steps

To apply for this Cloud Security Expert position:

1. Submit your application through the Sopra Steria job portal.
2. Prepare your portfolio, highlighting cloud security projects, security policies, and incident response plans.
3. Tailor your resume to emphasize cloud security skills, experience, and relevant certifications.
4. Practice technical interview questions and case studies to refine your problem-solving and architecture design abilities.
5. Research Sopra Steria's company culture, values, and cloud security initiatives to demonstrate your fit for the role.

⚠️ Important Notice: This enhanced job description includes AI-generated insights and cloud security industry-standard assumptions. All details should be verified directly with the hiring organization before making application decisions.