Senior Detection Engineer - Cloud Security & AI Threats

Lever, Inc.; France; À distance; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Fully remote

Health benefits

Pension plan

EAP program

Wellness days

Volunteer time off

Birthday off

Recognition program

Growth opportunities

Total Rewards

Diversity & inclusion

Résumé du poste

Lever, Inc. is seeking a Senior Security Operations Engineer based in France to translate advanced offensive security research into production-ready detection capabilities for modern applications.

You will build and maintain production‑grade detection content, develop new rules with OpenGrep, and research vulnerabilities, exploitation techniques, and emerging attack patterns. Collaborating with engineering, product, AI/ML, and infra teams, you will integrate content into cloud-native and CI/CD

Qualifications

• 5+ years of experience in offensive security or application security research, or equivalent experience with a relevant bachelor's degree plus 2 years.
• Broad programming knowledge with strong JavaScript skills and Python desirable.
• Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomies.
• Experience writing detection logic for DAST scanners, fuzzers, or comparable security systems.
• Hands-on web application penetration testing covering OWASP Top 10, REST, GraphQL, authentication and authorization.
• Ability to research complex technical problems and work with ASTs.
• Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems.
• Fluent English communication and collaboration skills.

Responsabilités

• Build and maintain production-ready security checks and detection content with a focus on accuracy and low FP rates.
• Develop new detection rules using OpenGrep to identify novel malware and vulnerability patterns.
• Research vulnerability classes, exploitation techniques, and emerging attack patterns for production detections.
• Extend analysis capabilities to support additional languages and evolving application technologies.
• Triage analysis pipeline packages, investigate findings, and validate detection results.
• Create attack-chain templates combining findings into higher-impact security scenarios.
• Develop evaluation harnesses, benchmarks, and testing frameworks to measure coverage and FP rates.
• Investigate difficult or ambiguous findings and maintain detection quality across the platform.
• Apply detection principles while contributing to internal standards and methodologies.
• Experiment with new security tools and techniques for scalable threat detection.
• Monitor developments in application security, AI security, LLM vulnerabilities, and MCP ecosystems.
• Collaborate with engineering, product, AI/ML, and infrastructure teams to deploy content.
• Integrate detection, testing, and validation into cloud-native and CI/CD environments.

Connaissances

JavaScript

Python

DAST

OpenGrep

Semgrep

Burp Suite

nmap

ffuf

HTTP

CI/CD

Cloud infrastructure

AST concepts

LLMs prompt engineering

YARA

Formation

Bachelor's degree in a relevant field

Outils

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

Description du poste

Lever, Inc. is seeking a Senior Security Operations Engineer based in France to translate advanced offensive security research into production-ready detection capabilities for modern applications.

You will build and maintain production‑grade detection content, develop new rules with OpenGrep, and research vulnerabilities, exploitation techniques, and emerging attack patterns. Collaborating with engineering, product, AI/ML, and infra teams, you will integrate content into cloud-native and CI/CD