Remote-First Security Operations Engineer

EPI Company; France; À distance; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Remote-first culture

EU work mobility

Bonus potential

Learning budget €5,000

Résumé du poste

European Payments Initiative (EPI) seeks an experienced Operations Security Engineer to join its Security Operations capability. You will triage alerts, respond to incidents, and hunt threats across cloud, identity, endpoint and applications in a remote-first, pan-European setup.

You will work with SOC, IAM, security and DevOps teams to sharpen detections, improve tooling, and maintain clear communication across technical and non‑technical stakeholders.

Qualifications

• 8+ years in cybersecurity with hands-on SOC roles.
• Fluent in English; other European languages a plus.
• Experience across the full SOC lifecycle from alert triage to response.
• Proficient with SIEM/EDR, log parsing and detection engineering.

Responsabilités

• Triaging alerts, identifying incidents, and investigating security events.
• Lead incident response using structured frameworks (e.g., SANS PICERL).
• Threat hunting based on attacker behavior, threats, and MITRE ATT&CK.
• Design and tune detection rules, playbooks, and automation workflows.
• Communicate findings clearly to technical and non-technical stakeholders.
• Collaborate with engineering, SOC, IR and IT to improve resilience.
• Participate in 24/7 on-call rotation approximately one week per month.

Connaissances

SOC analyst

Incident response

Threat hunting

Detection engineering

SIEM/EDR

Log analysis

Scripting (Python/PowerShell/KQL)

Cloud telemetry

On-call readiness

Communication

Formation

Bachelor's degree in cybersecurity or related field

Outils

Rapid7

Microsoft Defender

SIEM

EDR

AWS

Azure

Microsoft Entra ID

Okta

PagerDuty

Python

PowerShell

KQL

Jira

Confluence

GitHub

Description du poste

European Payments Initiative (EPI) seeks an experienced Operations Security Engineer to join its Security Operations capability. You will triage alerts, respond to incidents, and hunt threats across cloud, identity, endpoint and applications in a remote-first, pan-European setup.

You will work with SOC, IAM, security and DevOps teams to sharpen detections, improve tooling, and maintain clear communication across technical and non‑technical stakeholders.