Cybersecurity Engineer

Jobtailor; Paris; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Jobtailor is seeking an experienced cybersecurity analyst to design advanced detection scenarios and maintain IoC repositories tied to OSINT, dark web, and partner sources. You will evaluate new feeds, develop incident response playbooks, and contribute to SIEM/EDR use cases.

In this role you will support awareness campaigns, monitor real-time alerts, conduct in-depth attack analyses, and produce intelligence reports and post-incident RETEX analyses for major incidents.

Qualifications

• 5 years of experience in demanding operational cybersecurity environments.

Responsabilités

• Design advanced detection scenarios based on the TTPs of APT groups and cybercriminals
• Define and maintain the repository of indicators of compromise (IoCs) derived from OSINT, the dark web, and partner sources
• Evaluate and integrate new intelligence feeds and cyber threat monitoring solutions
• Contribute to the development of incident response playbooks and SIEM/EDR use cases
• Support employee awareness campaigns on security best practices
• Monitor alert streams in real time and enrich investigations with relevant IoCs
• Perform in-depth technical analysis of ongoing attacks
• Continuously collect and analyze information from open, closed, and partner sources
• Participate in on-call rotations and technical crisis committees for major incidents
• Write and distribute intelligence reports, threat bulletins, and post‑incident (RETEX) analyses

Connaissances

Threat hunting

OSINT collection

Threat intelligence

Incident response

Log analysis

Outils

Splunk

QRadar

CrowdStrike

SentinelOne

STIX/TAXII

MISP

Description du poste

Responsibilities

• Design advanced detection scenarios based on the TTPs of APT groups and cybercriminals
• Define and maintain the repository of indicators of compromise (IoCs) derived from OSINT, the dark web, and partner sources
• Evaluate and integrate new intelligence feeds and cyber threat monitoring solutions
• Contribute to the development of incident response playbooks and SIEM/EDR use cases
• Support employee awareness campaigns on security best practices
• Monitor alert streams in real time and enrich investigations with relevant IoCs
• Perform in-depth technical analysis of ongoing attacks
• Continuously collect and analyze information from open, closed, and partner sources
• Participate in on-call rotations and technical crisis committees for major incidents
• Write and distribute intelligence reports, threat bulletins, and post‑incident (RETEX) analyses

Requirements

• 5 years of experience in demanding operational cybersecurity environments
• Strong command of investigation methodologies (threat hunting, log analysis, behavioral analysis)
• Expertise in OSINT collection and exploitation, and in analyzing the TTPs of APT groups and cybercriminals
• Solid knowledge of IoCs and threat intelligence sharing formats (STIX/TAXII, MISP)
• Hands‑on experience with SOC tools (SIEM such as Splunk/QRadar, EDR such as CrowdStrike/SentinelOne)

Core Competencies

Demonstrates expertise in advanced threat detection, incident response, and cybersecurity methodologies, with a strong focus on OSINT collection and analysis of APT group TTPs. Proficient in utilizing SOC tools and maintaining threat intelligence repositories to enhance security operations.