CyberSecurity Engineer, SOC Analyst

Mistral; Paris; Sur place; EUR 55 000 - 75 000; Plein temps

Avantages offerts par ce poste

Health insurance

Transportation allowance

Sport allowance

Meal vouchers

Private pension plan

Generous parental leave policy

Résumé du poste

Mistral AI is seeking a Security Operations Center (SOC) Analyst to monitor, defend, and respond to threats across our rapidly evolving AI ecosystem. You will treat security telemetry as the core of our active defense, ensuring continuous security across IT, Engineering, Science, Compute and Infrastructure by building robust detection mechanisms and automated responses.

You will work with engineering and platform teams to centralize security logs, design high-fidelity alert rules, and

Qualifications

• 3+ years in SOC, IR, or Threat Hunting in cloud-native or fast-paced tech.
• Strong knowledge of MITRE ATT&CK framework and protecting high-value infrastructure.
• Experience writing queries (KQL, Splunk SPL) and using SIEM for detection.
• Ability to write automation scripts in Python or Go to interact with security APIs.
• Proven incident response experience and calm, methodical crisis management.

Responsabilités

• Centralize security logs across all Mistral environments with engineering teams.
• Design and tune high-fidelity alert scenarios to detect anomalies while reducing alert fatigue.
• Operationalize threat intelligence and integrate into detection pipelines.
• Investigate alerts, identify root causes, lateral movement, and impact.
• Lead or participate in incident lifecycle from containment to remediation during high-severity events.

Connaissances

SOC experience

Incident response leadership

Crisis management

Automation scripting with Python/Go

Cloud security fundamentals

Outils

KQL

Splunk SPL

SIEM platforms

Python/Go security APIs

Description du poste

About Mistral

At Mistral AI, we believe in the power of AI to simplify tasks, save time, and enhance learning and creativity. Our technology is designed to integrate seamlessly into daily working life.

We democratize AI through high-performance, optimized, open-source and cutting-edge models, products and solutions. Our comprehensive AI platform is designed to meet enterprise needs, whether on-premises or in cloud environments. Our offerings include le Chat, the AI assistant for life and work.

We are a dynamic, collaborative team passionate about AI and its potential to transform society.

Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between France, USA, UK, Germany and Singapore. We are creative, low-ego and team-spirited.

Join us to be part of a pioneering company shaping the future of AI. Together, we can make a meaningful impact. See more about our culture on mistral.ai/careers.

Role summary

Mistral AI is looking for a Security Operations Center (SOC) Analyst to monitor, defend and respond to threats across our rapidly evolving AI ecosystem.

You will treat security telemetry as the core of our active defense. Your objective is to ensure the continuous security of our diverse environment, spanning IT, Engineering, Science, Compute and Infrastructure by building robust detection mechanisms and moving swiftly from alert to automated response.

What you will do

• Partner with engineering and platform teams to ensure the comprehensive centralization of security logs across all Mistral environments.
• Design, test, and continuously tune high-fidelity alert scenarios and correlation rules to detect anomalous behavior while minimizing alert fatigue.
• Operationalize Cyber Threat Intelligence (CTI), monitoring the landscape for threats specific to AI and cloud infrastructure, and integrating actionable intel directly into our detection pipelines.
• Conduct rigorous, deep-dive investigations into security alerts, tracking root causes, identifying potential lateral movement, and determining impact.
• Drive the lifecycle of security incidents from containment to remediation, and coordinate cross-functional crisis management during high-severity events.

About you

• 3+ years of experience in a Security Operations Center (SOC), Incident Response, or Threat Hunting role, ideally within a cloud-native or fast-paced tech environment.
• Deep understanding of the threat landscape, the MITRE ATT&CK framework, and the methodologies required to protect high-value infrastructure and intellectual property.
• Strong experience writing complex queries (e.g., KQL, Splunk SPL, or similar) and leveraging SIEM platforms to build out correlation rules and detection logic.
• Ability to write practical automation scripts in Python or Go to interact with security APIs, enrich alert context, and streamline response workflows.
• Proven experience participating in or leading incident response efforts, demonstrating a calm, methodical approach to high-pressure crisis management.

Hiring Process

• Introduction call - 30 min
• Hiring Manager interview - 30 min
• Technical Rounds
  • Deep-Dive interview - 55 min
  • Panel interview - 1h15
• Culture-fit discussion - 30 min
• References

By applying, you agree to our Applicant Privacy Policy.

Location & Remote

The position is based in our Paris HQ offices and we encourage going to the office as much as we can (at least 3 days per week) to create bonds and smooth communication. Our remote policy aims to provide flexibility, improve work-life balance and increase productivity. Each manager can decide the amount of days worked remotely based on autonomy and a specific context (e.g. more flexibility can occur during summer). In any case, employees are expected to maintain regular communication with their teams and be available during core working hours.

What we offer

• Competitive salary and equity package
• Health insurance
• Transportation allowance
• Sport allowance
• Meal vouchers
• Private pension plan
• Generous parental leave policy

By applying, you agree to our Applicant Privacy Policy.