Detection Engineer — Build Next-Gen EDR Detections (Remote)

Crane Venture Partners; Paris; Hybride; EUR 45 000 - 57 000; Plein temps

Avantages offerts par ce poste

Flexible remote work

Health insurance (Alan)

Meal vouchers (Swile)

Mentor program

GymLib access

Résumé du poste

HarfangLab, a French cybersecurity scale-up in Paris, seeks a Detection Engineer to enhance EDR detections by turning threat intel into actionable detections. You will design Sigma and YARA rules, validate rule quality, and strengthen protection against evolving threats.

You will join a 7-person team in Paris with flexible remote options, strong autonomy, and opportunities to drive your own projects while partnering with security customers and partners.

Qualifications

• 2–3+ years in Cyber Threat Intelligence, Detection Engineering, Malware Analysis, or related cybersecurity field.
• Proficient in Python; working knowledge of Rust and/or C.
• Strong understanding of Windows, Linux, and macOS internals.
• Experience creating and maintaining detection rules (YARA, Sigma, IDS/IPS, EDR).
• Fluent in French and English; able to communicate technical topics clearly.

Responsabilités

• Improve EDR detection capabilities by transforming threat intelligence into detections.
• Design, develop, and maintain Sigma rules for behavioral detections and YARA rules for malware.
• Validate, tune, and monitor detection rules to minimize false positives.
• Research new detection opportunities and prototype improvements to strengthen the engine.
• Develop internal tools to accelerate threat research and detection workflows.

Connaissances

Cyber Threat Intelligence

Detection Engineering

Malware Analysis

Python

Rust/C

Windows internals

Linux internals

French & English

Outils

Sigma rules

YARA rules

IDS/IPS detections

EDR detections

Description du poste

HarfangLab, a French cybersecurity scale-up in Paris, seeks a Detection Engineer to enhance EDR detections by turning threat intel into actionable detections. You will design Sigma and YARA rules, validate rule quality, and strengthen protection against evolving threats.

You will join a 7-person team in Paris with flexible remote options, strong autonomy, and opportunities to drive your own projects while partnering with security customers and partners.