Security Operations Engineer III — Remote + Equity

Jobgether; France; Remote; EUR 75,000 - 105,000; Full time

Benefits offered by this job

Remote work

Equity options

25 days paid time off

Coworking access

Team events

Home office stipend

Learning budget

Private medical insurance

Job summary

Jobgether, on behalf of our partner company, seeks a Security Engineer III in France to own detection and response capabilities across Elastic SIEM and AWS, helping identify threats and drive incident resolution.

You will build, tune, and maintain detections, automate response workflows with Python and no-code tools, and contribute to audit-ready controls supporting SOC 2 and PCI DSS in a modern payments environment.

Qualifications

• Hands-on experience building and tuning SIEM detections (Elastic preferred).
• Experience securing AWS environments and cloud-native detection.
• Python for scripting, automation, and tooling.
• Terraform or similar IaC experience.
• Knowledge of MITRE ATT&CK application to detection.
• Incident triage and investigation experience.
• Strong written communication for documenting findings.
• Ability to work independently and on-call rotation.

Responsibilities

• Develop and maintain end-to-end detection and response workflows.
• Build and tune detections across Elastic SIEM and AWS.
• Manage incident investigations and triage alerts.
• Document investigations and runbooks for follow-up actions.
• Automate workflows with Python and no-code tools like Zapier or Tines.
• Contribute to audit-ready controls for SOC 2 and PCI DSS.
• Participate in on-call rotation and improve coverage.

Skills

SIEM detections

Python scripting

Cloud security

Incident investigation

AWS

MITRE ATT&CK

On-call readiness

Tools

Elastic SIEM

Terraform

Python tooling

Job description

Jobgether, on behalf of our partner company, seeks a Security Engineer III in France to own detection and response capabilities across Elastic SIEM and AWS, helping identify threats and drive incident resolution.

You will build, tune, and maintain detections, automate response workflows with Python and no-code tools, and contribute to audit-ready controls supporting SOC 2 and PCI DSS in a modern payments environment.