Senior SecOps Engineer: Incident Response & Detection Lead

Ledger; Paris; Sur place; EUR 110 000 - 150 000; Plein temps

Résumé du poste

Ledger is seeking a Staff Security Operations Engineer to join the SOC team. You’ll be a hands-on generalist capable of deep dives into cloud, endpoints, identities, and data centers, while guiding the team through complex incidents.

You will anchor CSIRT activities, define detection priorities, and help evolve our Agentic SOC and log pipelines. A strong background in security operations and cloud security is required.

Qualifications

• 9+ years in security operations, incident response, and CSIRT.
• Hands-on SIEM experience (Splunk) for investigations and detection.
• Strong cloud security fundamentals (AWS, IAM, logs) and container work.
• Ability to automate with Python, Bash, APIs, and CI/CD tooling.

Responsabilités

• Anchor critical-incident response (CSIRT) with senior technical leadership.
• Lead end-to-end investigations: root cause analysis, forensics, and remediation.
• Define and drive detection strategy and threat hunting initiatives.
• Evolve architecture and Agentic SOC, improving data pipelines and dashboards.
• Mentor and grow senior/junior engineers through code reviews and pairing.

Connaissances

Security Operations

Incident Response

CSIRT

Threat Hunting

Communication

Automation

Cloud Fundamentals

Team Leadership

Outils

Splunk

CrowdStrike

Wiz

Torq

AWS

Kubernetes

EKS

Description du poste

Ledger is seeking a Staff Security Operations Engineer to join the SOC team. You’ll be a hands-on generalist capable of deep dives into cloud, endpoints, identities, and data centers, while guiding the team through complex incidents.

You will anchor CSIRT activities, define detection priorities, and help evolve our Agentic SOC and log pipelines. A strong background in security operations and cloud security is required.