Cyber Security Engineer

Leap29; Paris; Remote; EUR 70,000 - 110,000; Full time

Job summary

Leap29 is seeking a Cyber Security Engineer to design, implement and continuously improve security controls across a large multi-country environment. This is a hands-on role blending security engineering, monitoring, incident response and continuous security improvement.

You will collaborate with infrastructure teams, developers and business stakeholders across locations, shaping security tooling, processes and standards as the organisation matures its security posture.

Qualifications

• Hands-on experience in security engineering and/or security operations within an enterprise environment.
• Experience managing security incidents from triage through to recovery.
• Strong knowledge across IAM, endpoint and cloud security domains.

Responsibilities

• Design, implement and continuously improve security controls across the organisation.
• Improve monitoring and alerting capabilities, developing response playbooks and embedding automation where possible.
• Investigate and respond to escalated security alerts, supporting containment, remediation and recovery activities.
• Support vulnerability management, including scanning, prioritisation and coordinating remediation.
• Contribute to the development of security policies, standards and best practices.
• Participate in security reviews for new suppliers, systems and technologies.
• Share knowledge, mentor colleagues and help raise security awareness across the organisation.
• Participate in an on‑call rota for high‑severity security incidents, with additional payment provided.

Skills

Security Eng

Incident Response

SIEM

Cloud Security

IAM

Endpoint Security

Threat Detection

Job description

Cyber Security Engineer

Location: France (Fully Remote but must be located in France)

The Opportunity

An established European organisation is investing heavily in strengthening its cyber security capability and is building out a dedicated security function to protect its people, systems, data and brands.

As a Cyber Security Engineer, you will play a key role in designing, implementing and improving security controls across a large, multi-country environment. This is a hands‑on role that combines security engineering, monitoring, incident response and continuous security improvement.

You will work closely with infrastructure teams, developers and business stakeholders across multiple locations, helping to shape security tooling, processes and standards as the organisation continues to mature its security posture.

Key Responsibilities

• Design, implement and continuously improve security controls across the organisation.
• Improve monitoring and alerting capabilities, developing response playbooks and embedding automation where possible.
• Investigate and respond to escalated security alerts, supporting containment, remediation and recovery activities.
• Support vulnerability management, including scanning, prioritisation and coordinating remediation.
• Contribute to the development of security policies, standards and best practices.
• Participate in security reviews for new suppliers, systems and technologies.
• Share knowledge, mentor colleagues and help raise security awareness across the organisation.
• Participate in an on‑call rota for high‑severity security incidents, with additional payment provided.

What We're Looking For

Essential Experience

• Hands‑on experience in security engineering and/or security operations within an enterprise environment.
• Experience managing security incidents from triage through to recovery.

Strong knowledge across several of the following areas

Identity & Access Security

• Entra ID / Azure AD
• MFA / SSO
• Conditional Access
• Privileged Access Management
• Zero Trust

Endpoint & Email Security

• EDR/XDR platforms such as SentinelOne or CrowdStrike
• MDM solutions such as Intune or Workspace ONE
• Email security platforms such as Mimecast or Darktrace Email

Cloud & SaaS Security

• AWS GuardDuty
• Microsoft Defender for Cloud
• Wiz or similar cloud security platforms

SIEM & Detection

• SIEM platforms such as Microsoft Sentinel, Wazuh or Splunk
• Alert creation and tuning
• MITRE ATT&CK framework
• Query languages such as KQL or SPL

Network Security

• Firewalls, VPNs and web security controls
• Network detection and response tools

Vulnerability Management

• Scanning tools such as Tenable
• Risk prioritisation and remediation coordination
• Compliance reporting

Strong understanding of common cyber threats, attacker techniques and security hardening practices.

Desirable Experience

• Experience in retail, distribution, warehousing or e-commerce environments.
• Exposure to OT / IoT security.
• Familiarity with ISO 27001 and European regulatory requirements.
• Understanding of secure development practices including SDLC, SAST/DAST and CI/CD security.
• Experience with data protection, classification or DLP tooling.
• Additional European languages such as French, German or Italian.

Why Apply?

• Fully remote position, based anywhere in France.
• Opportunity to help shape a growing cyber security function.
• Work across a large, international technology environment.
• Exposure to modern security tooling and cloud security platforms.
• Collaborate with teams across multiple European countries.
• Competitive salary and benefits.
• Additional payment for participation in the on‑call rota.
• Opportunity for occasional European travel.