Cloud Security Detection Engineer – Threat Hunting & AI

Ubisoft Entertainment; France; À distance; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Profit Sharing

Paid time off

Healthcare

Résumé du poste

Ubisoft Entertainment is seeking a Cloud Security Specialist to join the Detection Engineering team within the SOC. You design, build, and tune detection content for Ubisoft's cloud infrastructure, CI/CD pipelines, and DevOps tooling, applying hands-on cloud and DevOps experience to threat hunting and SIEM development.

You will mentor SOC analysts, work with CTI, and help create automated responses and playbooks, leveraging LLMs and GenAI to accelerate detection and triage across cloud

Qualifications

• Hands-on cloud engineering experience in AWS, Azure, or GCP.
• Solid understanding of CI/CD tooling and how they get attacked.
• Experience with IaC and cloud telemetry logging.

Responsabilités

• Develop and maintain detection content (Splunk/SIEM, cloud-native logging, IDS) targeting attacks against cloud infrastructure, IAM, containers/Kubernetes, and CI/CD pipelines.
• Define detection engineering processes and standards specific to cloud and DevOps attack surfaces.
• Conduct threat hunting engagements across cloud environments and CI/CD telemetry.
• Research attacker TTPs targeting cloud and CI/CD (MITRE ATT&CK for Cloud, supply chain attacks, IAM abuse, container escape, pipeline poisoning) and translate them into detection logic.
• Leverage LLMs and GenAI to accelerate detection engineering work — generating and tuning detection logic, summarizing and enriching alerts, and speeding up hunting and triage.
• Design and build automated response playbooks (SOAR or custom orchestration) that contain or remediate cloud/CI-CD threats without manual intervention.
• Validate detection coverage through purple-teaming and adversary emulation against cloud environments.
• Mentor SOC analysts on investigating cloud-related alerts and the data sources available to them.
• Work with CTI and Incident Response to convert cloud threat intelligence into new detections and response automation.
• Identify logging and telemetry gaps in cloud/CI-CD systems that limit detection coverage, and drive requirements back to platform teams.

Connaissances

Cloud security

CI/CD pipelines

Threat hunting

LLMs/GenAI in security

Scripting (Python/Go)

Cloud certifications asset

Outils

Splunk

Terraform

CloudFormation

Pulumi

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Description du poste

Ubisoft Entertainment is seeking a Cloud Security Specialist to join the Detection Engineering team within the SOC. You design, build, and tune detection content for Ubisoft's cloud infrastructure, CI/CD pipelines, and DevOps tooling, applying hands-on cloud and DevOps experience to threat hunting and SIEM development.

You will mentor SOC analysts, work with CTI, and help create automated responses and playbooks, leveraging LLMs and GenAI to accelerate detection and triage across cloud