Senior Python Engineer – Threat Hunting - Paris, France (Specialist I - Information Security)

UST; Paris; Hybrid; EUR 110,000 - 150,000; Full time

Job summary

CyberProof in Paris, a UST company, is seeking a Senior Python Engineer with threat hunting experience to join our managed security services team. This role focuses on building and maintaining Python‑based automation and analytics frameworks to support proactive threat hunting and security investigations.

The successful candidate will combine strong software development skills with hands‑on threat hunting exposure across enterprise and cloud environments, and will collaborate with

Qualifications

• Python development with production‑quality code and standard engineering practices.
• Experience with JSON, CSV, and Parquet data formats.
• Familiarity with Pandas and NumPy.
• Git and commit workflows.

Responsibilities

• Design, develop, and maintain Python tools and automation for threat hunting.
• Standardize Jupyter Notebook hunting workflows with data enrichment and reporting.
• Create reusable Python libraries, APIs, and CLI tools for scalable hunts.
• Build data pipelines to ingest and analyze security telemetry.
• Conduct hypothesis‑driven threat hunts across endpoints, networks, cloud data.
• Schedule automated hunting workflows via pipelines.
• Collaborate with Threat Intelligence and Detection teams to translate findings into detections.
• Document methodologies, findings, and recommendations in reports.

Skills

Python

Software engineering

Threat hunting

Pandas

NumPy

Git

Automation tooling

Data formats

Tools

Parquet

JSON

CSV

Job description

Role DescriptionSenior Python Engineer – Threat Hunting

Location: Paris, France (Hybrid)

Employment Type: Fixed‑Term Employment Contract – 12 Months (Full‑Time)

Role Overview

CyberProof (a UST company) is seeking a Senior Python Engineer with threat hunting experience to join our managed security services team. This role is primarily engineering‑focused, with responsibility for building and maintaining Python‑based automation and analytical frameworks that support proactive threat hunting and security investigations. The successful candidate will have strong software development experience, complemented by hands‑on exposure to threat hunting or cybersecurity investigations, particularly in enterprise and cloud environments.

Key Responsibilities

• Design, develop, and maintain Python‑based tools and automation frameworks to support threat hunting and security investigations
• Build and standardise Jupyter Notebook–based hunting workflows, including data enrichment, validation, automation, and reporting
• Develop reusable Python libraries, modules, APIs, and command‑line tools to enable scalable hunt execution
• Engineer data pipelines to ingest, transform, and analyse large volumes of security telemetry
• Perform hypothesis‑driven threat hunting and targeted investigations across endpoint, network, identity, and cloud data
• Orchestrate and schedule automated hunting workflows using pipeline or orchestration platforms
• Collaborate with Threat Intelligence and Detection Engineering teams to translate hunting outcomes into operational detections
• Document methodologies, findings, and recommendations in clear, structured technical reports

Required Experience And Skills

• Python / Software Engineering
  • Strong experience as a Python developer or software engineer, with a focus on automation, tooling, or data processing
  • Proven ability to write production‑quality Python code following standard engineering best practices
  • Experience working with structured data formats such as JSON, CSV, and Parquet
  • Familiarity with Python data and analytics libraries (e.g., Pandas, NumPy)
  • Experience with version control systems (Git) and standard development workflows
• Threat Hunting / Security
  • Hands‑on experience supporting threat hunting, security investigations, or detection engineering activities
  • Working knowledge of adversary techniques and the ability to apply frameworks such as MITRE ATT&CK
  • Experience analysing security telemetry from endpoint, network, and cloud environments
  • Exposure to hunting or investigation activities in Azure, AWS, or GCP environments

Desirable Skills

• Experience integrating with security platforms such as Microsoft Sentinel/Defender, Cybereason, or CrowdStrike
• Experience with notebook automation, templating, or report generation
• Familiarity with CI/CD pipelines and DevOps practices
• Relevant security certifications (GIAC, OSCP, CEH, or equivalent)

Additional Information

This role focuses on engineering and automation to support proactive threat hunting. It is not a shift‑based SOC monitoring or ‑triage position.