Cybersecurity Consultant – DevSecOps / Kubernetes

About the role

Capgemini is looking for an experienced Cybersecurity Consultant to join its DevSecOps and Kubernetes security team. You will focus on advanced threat detection engineering and proactive threat hunting across Linux, containerised, Kubernetes and cloud‑native environments.

Key responsibilities

• Design, develop and maintain threat‑informed detection rules using cyber threat intelligence and incident feedback.
• Engineer and deploy detection use cases for Linux workloads, including physical, virtual and containerised systems.
• Integrate and validate security telemetry (container runtime events, Kubernetes audit logs, cloud control‑plane logs) into SIEM platforms.
• Continuously tune detections to reduce false positives and improve coverage.
• Conduct proactive threat hunting and retro‑hunting, turning findings into production‑grade detections.
• Contribute to detection coverage mapping, gap analysis and risk‑based prioritisation.
• Produce and maintain technical documentation such as specifications, validation evidence, runbooks and reports.

Required profile

• Master’s degree in IT or Cybersecurity.
• EU citizenship (EU‑27) and fluent English.
• Minimum 6 years of cybersecurity experience.
• At least one recognised cybersecurity certification (e.g., CISSP, CISM, GCIH, Security+, CEH, cloud security certs).
• Eligibility for EU security clearance.

Required skills

• Kubernetes security and attacker techniques.
• Linux and container security.
• Threat detection engineering and threat hunting.
• SIEM platforms, preferably Splunk.
• Cloud security (AWS and/or Azure).
• Detection content lifecycle, Git‑based workflows, CI/CD or DetectionOps.

What we offer

• Hybrid working model with up to 70 % remote work.
• Flex‑abroad program allowing up to 45 days of work abroad per year.
• Collaborative international environment and opportunities for professional growth.