SOC Analyst – Detection & Response (Blue Team)
CDICyberdéfense·Casablanca, Maroc·Hybrid·Mid (2-5 yrs)·18 000 – 28 000 MAD brut / mois
Job Description
Turn real threats into defensive training. You design the SOC/Blue Team exercises that teach our clients' analysts to detect and respond to attacks.
Your mission:
- Design detection & incident-response scenarios (SIEM, logs, threat hunting).
- Build and maintain realistic ELK/Splunk environments fed by replayed attacks.
- Write briefs, playbooks and pedagogical solutions (FR/EN).
- Track TTPs (MITRE ATT&CK) and keep content current.
- Occasionally run training sessions and debriefs.
Requirements
- 2 to 5 years in SOC, incident response or detection.
- A SIEM (ELK, Splunk, Sentinel), log analysis, MITRE ATT&CK.
- Defender-side understanding of attacks (Active Directory, phishing, malware).
- Excellent writing and teaching skills, FR and EN.
- A plus: Blue Team certification (GCIH, BTL1, etc.).
What We Offer
- 18,000–28,000 MAD/month + bonus.
- Hybrid work, latest threats to replay, unlimited labs.
- Blue Team certification budget.
- Direct impact on the upskilling of dozens of analysts.
Related positions
DFIR & Threat Intelligence Analyst
Cyberdéfense · Casablanca, Maroc · CDI
Mobile and Web/Applications Penetration Testing Consultant (Mid-Level)
Cybersécurité Offensive · Casablanca, Maroc · CDI
GRC Consultant / Audit & Compliance (ISO 27001, NIST, CIS)
Gouvernance, Risques & Conformité (GRC) · Casablanca, Maroc · CDI
Cloud Security Engineer (Azure / AWS)
Cloud Security · Casablanca, Maroc · CDI
Apply Now
Submit your application directly online.