Senior Security Operations Lead – CSIRT & AI-Driven SOC

INKcredible Design & Printing; Paris; Sur place; EUR 90 000 - 140 000; Plein temps

Résumé du poste

Ledger is seeking a Staff Security Operations Engineer to join our SecOps team in Paris. You’ll be the top technical expert on incident management, leading the most complex CSIRT responses and driving proactive threat hunting.

You will shape the detection pipeline, SIEM (Splunk) architecture and SOAR workflows (Torq), expand the Agentic SOC and automation, and mentor engineers while raising security standards across the organization.

Qualifications

• 8+ years of experience in security operations and incident response.
• Strong expertise in SIEM (Splunk) and SOAR platforms.
• Experience with cloud security in AWS and Kubernetes.
• Ability to automate tasks and reporting using Python, Bash, APIs, or GitHub Actions.
• Excellent communication and documentation skills.

Responsabilités

• Lead the most complex incidents (CSIRT) and coordinate responses.
• Define detection strategy and lead proactive threat hunting.
• Architect and evolve the Agentic SOC, log pipelines, and automation.
• Mentor engineers and establish runbooks and playbooks.
• Collaborate with Engineering, IT, and Cloud teams to align security with business goals.

Connaissances

Security Operations

Incident Management

Threat Hunting

CSIRT

Python

Bash

APIs

GitHub Actions

Cloud Security

SIEM (Splunk)

SOAR

Kubernetes

Outils

Splunk

CrowdStrike

Wiz

Torq

AWS

EKS

Kubernetes

Description du poste

Ledger is seeking a Staff Security Operations Engineer to join our SecOps team in Paris. You’ll be the top technical expert on incident management, leading the most complex CSIRT responses and driving proactive threat hunting.

You will shape the detection pipeline, SIEM (Splunk) architecture and SOAR workflows (Torq), expand the Agentic SOC and automation, and mentor engineers while raising security standards across the organization.