LOreal is Hiring For Cyber Security Operations (SecOps) Engineer

Key Responsibilities

Security Operations & Risk Mitigation

• Lead security operations for servers, virtual machines, cloud workloads, and associated infrastructure services.
• Oversee the effectiveness and coverage of security technologies such as Tanium, server EDR, anti-malware, CWPP, vulnerability-management, and security-monitoring tools.
• Drive the remediation of vulnerabilities, misconfigurations, unsupported technologies, and security-control gaps.
• Define and track SecOps KPIs and KRIs, including vulnerability ageing, patch compliance, workload-security coverage, remediation timelines, and risk exceptions.
• Prepare operational dashboards and risk reports for cybersecurity governance and leadership teams.

Vulnerability, Patch & Obsolescence Management

• Own the end-to-end vulnerability-management lifecycle for servers, VMs, infrastructure platforms, and cloud workloads.
• Coordinate vulnerability identification, triage, prioritisation, remediation planning, exception management, validation, and closure.
• Orchestrate lifecycle patching across on-premise, hybrid, and multi-cloud environments.
• Track and manage technology-obsolescence risks related to operating systems, middleware, databases, runtimes, virtualization platforms, and infrastructure components.
• Apply a risk-based approach considering severity, exploitability, asset criticality, business impact, and external exposure.

Cloud Security

• Manage cloud-security posture and remediation activities across AliCloud ,Azure, GCP and AWS environments.
• Demonstrate hands-on experience with AliCloud technologies and security controls, including ECS, VPC, RAM, security groups, logging, monitoring, workload protection, and cloud-configuration security.
• Coordinate remediation of CSPM findings and cloud misconfigurations.
• Partner with Cloud and Platform teams to improve identity controls, network segmentation, encryption, logging, monitoring, security baselines, and workload hardening.
• Ensure server, VM, cloud workload, and security-relevant configuration information is complete and accurate in the CMDB.

Security Audit Tracking & Mitigation

• Manage the tracking and remediation of findings from internal and external audits, cybersecurity assessments, penetration tests, cloud-security reviews, compliance reviews, and operational-risk assessments.
• Maintain a central audit-action tracker covering action owner, due date, remediation evidence, risk status, and escalation requirements.
• Validate evidence before closure and ensure actions address the root cause of the identified control gap.
• Report on open, overdue, high-risk, and recurring audit findings, highlighting trends and required management decisions.

DRP & Resilience Management

• Own and maintain the annual Disaster Recovery Plan (DRP) calendar.
• Coordinate DRP exercises, recovery tests, failover tests, tabletop exercises, evidence collection, lessons learned, and remediation follow-up.
• Work with Infrastructure, Cloud, Application, and Business Continuity teams to improve recovery readiness, backup controls, resilience, and operational continuity.
• Ensure gaps identified during DRP tests are tracked, assigned, and closed within agreed timelines.

On-Demand Cybersecurity Initiatives

• Lead or support targeted cybersecurity initiatives based on business, audit, technology, regulatory, or risk requirements.
• Typical initiatives may include Java compliance, cyber-process improvement, server hardening, cloud-security remediation, security-tool onboarding, CMDB improvement, privileged-access remediation, audit remediation, and cloud-migration security assessments.
• Manage action plans, milestones, risks, dependencies, stakeholder communication, and delivery reporting.

AI, Automation & Infrastructure as Code (IaC)

• Experience applying automation and AI-enabled capabilities to improve cybersecurity operations, such as vulnerability prioritisation, alert enrichment, remediation tracking, audit-evidence collection, compliance reporting, and security-dashboard automation.
• Understanding of responsible use of AI in security operations, including validation of AI-generated outputs, data protection, access controls, traceability, and human oversight for risk-based decisions.
• Practical experience with automation and orchestration tools, scripting, APIs, or workflow platforms to reduce manual operational activities and improve remediation speed and consistency.
• Working knowledge of Infrastructure as Code (IaC) security practices, including secure provisioning, configuration validation, policy-as-code, secrets management, version control, and automated compliance checks.
• Experience reviewing or supporting IaC technologies such as Terraform, Ansible, ARM templates, Bicep, Alibaba Cloud Resource Orchestration Service (ROS), or equivalent tools.

We Are Looking For

Education & Experience

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.
• Minimum 5 years of relevant experience in cybersecurity operations, server security, cloud security, vulnerability management, IT infrastructure security, audit remediation, or IT risk.
• Demonstrated experience managing security for servers, virtual machines, cloud workloads, and hybrid infrastructure.
• Proven experience with vulnerability remediation, patch-management coordination, audit tracking, and security-control reporting.
• Experience in enterprise-scale, geographically distributed, or managed-services environments is preferred.

Certifications Candidates should hold at least one relevant cybersecurity or cloud-security certification, such as:

• CISM, CISSP, CCSP, CompTIA Security+
• Microsoft Azure Security Engineer Associate
• AWS Certified Security – Specialty
• Relevant Ali Cloud certification, preferably in cloud architecture, cloud security, or cloud operations

Technical Skills

• Strong knowledge of server, VM, and cloud-workload security.
• Experience with vulnerability management, patching, secure configuration, CSPM, CWPP, CMDB, audit remediation, and DRP testing.
• Working knowledge of AliCloud, including ECS, VPC, RAM, security groups, logging, monitoring, and cloud-security practices.
• Familiarity with Azure and AWS cloud-security controls.
• Exposure to tools such as Tanium, Qualys, Tenable, Rapid7, Microsoft Defender for Cloud/Servers, CrowdStrike, Wiz, Prisma Cloud, or equivalent technologies.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, ITIL, and cloud-security best practices is desirable.