Remote SOC Engineer – Threat Hunting & IR

European Payments Initiative; Paris; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Remote-first culture

EU mobility program

Competitive compensation package

Job summary

European Payments Initiative is hiring an Operations Security Engineer to join our Security Operations capability. You will triage alerts, respond to incidents, hunt threats and improve detection across cloud, identity, endpoint and application environments.

You will be at the heart of our SOC, collaborating with Security, Engineering, DevOps, IT and Operations to strengthen detection and response while ensuring visibility and resilience across our pan-European footprint.

Qualifications

• 8+ years in cybersecurity with hands-on SOC, IR or detection engineering.
• Fluent English; other European languages are a plus.
• Thrives in a remote-first, fast-paced environment.
• Strong knowledge of SIEM/EDR, log parsing and detections.

Responsibilities

• Act as central touchpoint for alert triage, incident ID and security investigations across EPI environments.
• Lead incident response using structured frameworks (SANS PICERL) from prep to recovery.
• Perform threat hunting based on attacker behavior and MITRE ATT&CK techniques.
• Parse and correlate logs from auth, app, system, endpoint and cloud sources (AWS/Azure).
• Design, tune, and maintain detection rules, dashboards, alerts and automations.
• Contribute to SOC playbooks, runbooks and SIEM/EDR integrations.
• Document findings and remediation recommendations for technical and non-technical stakeholders.
• Collaborate with engineering, SOC, IR and IT to improve coverage and resilience.

Skills

SOC analyst

Incident response

Threat hunting

Detection engineering

SIEM/EDR tuning

Log analysis

Python

PowerShell

KQL

Cloud security

Communication

Tools

Rapid7

Microsoft Defender

SIEM

EDR

AWS

Azure

Microsoft Entra ID

Okta

PagerDuty

Jira

Confluence

GitHub

Job description

European Payments Initiative is hiring an Operations Security Engineer to join our Security Operations capability. You will triage alerts, respond to incidents, hunt threats and improve detection across cloud, identity, endpoint and application environments.

You will be at the heart of our SOC, collaborating with Security, Engineering, DevOps, IT and Operations to strengthen detection and response while ensuring visibility and resilience across our pan-European footprint.