Responsibilities
- Act as the main coordinator for critical incidents spanning cloud infrastructure, corporate networks, endpoints, identity systems, and data centers.
- Lead comprehensive investigations including root cause analysis, digital forensics, timeline reconstruction, and development of remediation strategies to prevent future incidents.
- Serve as the internal authority on incident management, ensuring consistent processes for handling, escalation, and documentation.
- Define and refine the team's detection strategy, architectural framework, and operational methodologies.
- Drive proactive threat hunting initiatives using cyber threat intelligence and open-source intelligence to identify and mitigate potential risks early.
- Tackle advanced and evolving detection challenges, transforming threat insights into actionable security enhancements.
- Design and improve SIEM (Splunk) architecture and SOAR (Torq) workflows to strengthen detection, triage, and incident response capabilities.
- Enhance the Splunk environment by improving data quality, standardization via CIM, data modeling, search efficiency, and detection governance.
- Own and evolve the architecture of the internal Agentic SOC and log/data pipeline, while leading automated reporting solutions for security operations.
- Apply specialized knowledge in AWS, EKS/Kubernetes, and Wiz (CSPM/CNAPP) to secure cloud environments and reduce large-scale exposure.
- Develop standardized procedures, playbooks, and runbooks that guide the security operations team’s actions.
- Mentor senior and junior engineers to advance technical capabilities and amplify team effectiveness.
- Collaborate with Engineering, Infrastructure, IT, and Cloud teams to align security operations with organizational goals.
Work Arrangement
Hybrid — available in Paris, Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore
Other
- AI plays a central role in operations; advancing AI applications in security is a key strategic focus this year.
- This is a senior individual contributor role where influence and impact are driven by technical expertise, decision-making under pressure, and leadership through example.
