Cyber Security Engineer

Leap29; Lyon; À distance; EUR 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

On-call rota pay

Résumé du poste

Leap29 is seeking a Cyber Security Engineer to design, implement and continuously improve security controls across a large, multi-country environment. This hands-on role combines security engineering, monitoring, incident response and continuous security improvement.

You will work with infrastructure, developers and business stakeholders to shape security tooling, processes and standards as the organisation matures its security posture.

Qualifications

• Hands-on security engineering and/or security operations in an enterprise.
• Experience managing security incidents from triage to recovery.
• Strong knowledge of MFA, SSO, PAM and EDR/XDR platforms.

Responsabilités

• Design, implement and continuously improve security controls across the organisation.
• Improve monitoring and alerting capabilities, develop response playbooks and embed automation.
• Investigate and respond to escalated security alerts, supporting containment and remediation.
• Support vulnerability management, including scanning, prioritisation and coordinating remediation.
• Contribute to development of security policies, standards and best practices.
• Participate in security reviews for new suppliers, systems and technologies.
• Share knowledge, mentor colleagues and raise security awareness.
• Participate in on-call rota for high-severity security incidents with on-call pay.

Connaissances

Security engineering

Security operations

Incident response

Automation

Cross-functional collaboration

Outils

SentinelOne

CrowdStrike

Intune

Workspace ONE

Mimecast

Darktrace Email

AWS GuardDuty

Wiz

Microsoft Sentinel

Splunk

Tenable

Description du poste

An established European organisation is investing heavily in strengthening its cyber security capability and is building out a dedicated security function to protect its people, systems, data and brands.

As a Cyber Security Engineer, you will play a key role in designing, implementing and improving security controls across a large, multi-country environment. This is a hands-on role that combines security engineering, monitoring, incident response and continuous security improvement.

You will work closely with infrastructure teams, developers and business stakeholders across multiple locations, helping to shape security tooling, processes and standards as the organisation continues to mature its security posture.

Key Responsibilities

• Design, implement and continuously improve security controls across the organisation.
• Improve monitoring and alerting capabilities, developing response playbooks and embedding automation where possible.
• Investigate and respond to escalated security alerts, supporting containment, remediation and recovery activities.
• Support vulnerability management, including scanning, prioritisation and coordinating remediation.
• Contribute to the development of security policies, standards and best practices.
• Participate in security reviews for new suppliers, systems and technologies.
• Share knowledge, mentor colleagues and help raise security awareness across the organisation.
• Participate in an on-call rota for high-severity security incidents, with additional payment provided.

What We're Looking For

• Hands-on experience in security engineering and/or security operations within an enterprise environment.
• Experience managing security incidents from triage through to recovery.

Strong knowledge across several of the following areas:

• MFA / SSO
• Conditional Access
• Privileged Access Management
• EDR/XDR platforms such as SentinelOne or CrowdStrike
• MDM solutions such as Intune or Workspace ONE
• Email security platforms such as Mimecast or Darktrace Email
• AWS GuardDuty
• Wiz or similar cloud security platforms
• SIEM platforms such as Microsoft Sentinel, Wazuh or Splunk
• Alert creation and tuning
• MITRE ATT&CK framework
• Query languages such as KQL or SPL

Identity & Access Security

• MFA / SSO
• Conditional Access
• Privileged Access Management
• EDR/XDR platforms such as SentinelOne or CrowdStrike
• MDM solutions such as Intune or Workspace ONE
• Email security platforms such as Mimecast or Darktrace Email
• AWS GuardDuty
• Wiz or similar cloud security platforms
• SIEM platforms such as Microsoft Sentinel, Wazuh or Splunk
• Alert creation and tuning
• MITRE ATT&CK framework
• Query languages such as KQL or SPL

Network Security

• Firewalls, VPNs and web security controls
• Network detection and response tools

Vulnerability Management

• Scanning tools such as Tenable
• Risk prioritisation and remediation coordination
• Compliance reporting

Strong understanding of common cyber threats, attacker techniques and security hardening practices.

• Experience in retail, distribution, warehousing or e-commerce environments.
• Exposure to OT / IoT security.
• Familiarity with ISO 27001 and European regulatory requirements.
• Understanding of secure development practices including SDLC, SAST/DAST and CI/CD security.
• Experience with data protection, classification or DLP tooling.
• Additional European languages such as French, German or Italian.

Why Apply?

• Fully remote position, based anywhere in France.
• Opportunity to help shape a growing cyber security function.
• Work across a large, international technology environment.
• Exposure to modern security tooling and cloud security platforms.
• Collaborate with teams across multiple European countries.
• Competitive salary and benefits.
• Additional payment for participation in the on-call rota.
• Opportunity for occasional European travel.