Senior Probe Appliance Engineer

CryptoNext Security; Paris; Hybride; EUR 70 000 - 90 000; Plein temps

Avantages offerts par ce poste

Flexible hybrid/remote work

Competitive compensation

Opportunity to work on cutting-edge technology

Résumé du poste

A leading cybersecurity company in Paris is seeking a Senior Probe Appliance Engineer. In this role, you will take technical ownership of the COMPASS probe appliance, specializing in packet capture and traffic analysis. This position requires deep expertise in Linux system administration and kernel tuning. You will work on high-performance data paths, collaborate with R&D teams, and ensure reliable data ingestion into Kafka. The ideal candidate has over 10 years of relevant experience and a master's degree from a recognized institution. The benefits include a flexible work environment and competitive compensation.

Qualifications

• 10+ years of experience in system engineering, network engineering, or infrastructure security.
• Deep expertise in Linux system administration, kernel tuning, and OS-level performance optimization.
• Experience with CIS, NIST, or ANSSI hardening methodologies.

Responsabilités

• Take full technical ownership of the COMPASS probe appliance.
• Deploy, configure, and maintain the COMPASS probe appliance.
• Optimize the appliance for high-throughput packet capture.

Connaissances

Linux system administration

Kernel tuning

Networking

Traffic analysis

Documentation skills

Fluency in English

Formation

Master's degree from a French engineering school or equivalent

Outils

Kafka

Python

Ansible

Description du poste

Who We Are

CryptoNext Security is a deeptech startup specializing in post-quantum cryptography. We help businesses and institutions get ready for a world where quantum computers will break today's cryptography. Our customers include major banks, defense actors, telecom operators, and large enterprises securing their most sensitive infrastructures.

On a daily basis, you will

As Senior Probe Appliance Engineer, you will take full technical ownership of the COMPASS probe appliance, a high-performance hardware + software component responsible for packet capture, telemetry extraction, and encrypted traffic analysis. You will work across the full lifecycle of the appliance: system installation, kernel-level tuning, security hardening, performance optimization, reliability engineering, and operational excellence.

System, OS & Installation

• Deploy, configure, and maintain the COMPASS probe appliance (hardware + Linux OS).
• Perform OS-level and kernel-level hardening (CIS benchmarks, secure boot, file integrity, access control).

Network Performance & Packet Capture

• Optimize the appliance for high-throughput packet capture using DPDK, AF_XDP, or zero-copy capture frameworks.
• Tune network interfaces, NIC offloading, IRQ distribution, and NUMA alignment.
• Build low-latency, high-performance data paths.

Data Ingestion & Pipeline Integration

• Guarantee secure, reliable ingestion into Kafka pipelines.
• Ensure compatibility and performance with downstream data and platform components.

Engineering Collaboration

• Work closely with R&D teams to integrate parsing modules, firmware updates, and kernel patches.
• Document operating procedures (installation, upgrades, troubleshooting).

Observability, Monitoring & Reliability

• Implement monitoring (metrics, logs, health checks).
• Maintain configuration management and full traceability of system changes.
• Run benchmarks, stress tests, and capacity planning.

Deployment Support

• Provide support to customers and integrators during field deployment (occasional on-site presence).

Security

• Contribute to the appliance's security model:
  • access control
  • secure boot chain
  • encryption (at rest and in transit)
  • update pipeline security

Requirements

• 10+ years of experience in system engineering, network engineering, or infrastructure security.
• Master's degree from a French engineering school or equivalent.
• Deep expertise in:
  • Linux system administration
  • Kernel tuning and OS-level performance optimization
  • Networking, packet capture, and traffic analysis
• Experience with:
  • CIS, NIST, or ANSSI hardening methodologies
  • Hardware optimization (CPU pinning, NUMA, NIC queues, hugepages)
  • Kafka or streaming ingestion technologies
  • Automation scripting (Bash, Python, Ansible)
• Excellent documentation skills and rigor.
• Fluent in English.

Bonus

• Experience with DPDK, AF_XDP, or similar high-throughput capture frameworks.
• Background in NDR / IDS / DPI appliances or packet inspection.
• Knowledge of secure boot chains, TPMs, or hardware-backed security.
• Experience with embedded Linux or containerized environments.
• Familiarity with Elasticsearch or observability stacks.
• Exposure to cryptographic or secure distributed systems.

The team you'll be joining

• R&D engineers building probe parsing logic and cryptographic modules
• Data engineering & platform teams managing ingestion and observability pipelines
• The Head of Engineering and CTO for architecture and long-term strategy
• Product and QA teams to ensure reliability, performance, and compliance

You will be the reference engineer for everything related to probe performance, appliance security, and kernel-level tuning.

Our recruitment process

• HR intro - get to know each other and understand your background.
• Technical interview with senior engineers + Head of Engineering (Linux, networking, OS tuning, probe performance).
• CTO meeting - architecture, deep-dive, and cultural fit.
• Offer & onboarding — welcome to CryptoNext!

Benefits

What's in it for you at CryptoNext

• Shape a core component of a next-generation cybersecurity product.
• Work on challenging, low-level engineering problems involving kernel optimization and network performance.
• Collaborate with senior engineers and cryptography experts.
• Flexible hybrid/remote work with a central Paris office.
• Competitive compensation aligned with seniority.
• Direct impact on the technical backbone of a quantum-safe observability platform