Senior SOC Detection & Response Engineer (L2/L3)

Solidgate; France; On-site; EUR 70,000 - 92,000; Full time

Benefits offered by this job

30+ days off

Unlimited sick leave

Free office meals

Health coverage

Apple gear

Courses & conferences

Sports & wellness benefits

Job summary

Solidgate is seeking an experienced SOC/Detection & Response engineer to own the security operations in a fast‑growing fintech environment. You will build and operate the SIEM, design rules mapped to MITRE ATT&CK, and lead incident response in a regulated payments platform.

Join a senior team, own log onboarding from AWS, JumpCloud, and Google Workspace, run threat hunts, produce monthly metrics, and craft runbooks.

Qualifications

• 3+ years in SOC/Detection & Response at L2/L3 level with hands-on investigation experience.
• Practical experience building or operating a SIEM, including writing and tuning detection rules.
• Detection engineering with MITRE ATT&CK mapping; comfortable with KQL, SPL, or equivalent queries.
• Experience investigating cloud log sources: AWS CloudTrail, GuardDuty, Google Workspace, EDR/XDR.
• Scripting and automation skills (Python or similar) for telemetry processing.
• Understanding attacker techniques and how they manifest in logs; threat-informed view.
• Structured under pressure with disciplined investigation process and thorough post-mortems.

Responsibilities

• Build and operationalize the SIEM from PoC to production with UEBA and case management.
• Design, write, and tune detection rules mapped to MITRE ATT&CK.
• Triage and investigate L2/L3 alerts; reduce false positives; establish escalation paths.
• Lead incident response and basic forensics; containment, eradication, lessons learned.
• Onboard log sources across AWS, JumpCloud, Google Workspace, CDE, and SWIFT.
• Run threat hunts based on realistic attack hypotheses for a payment platform.
• Build and maintain runbooks and playbooks; automate actions via SOAR or scripting.
• Define SOC metrics and monthly reporting on detection coverage and response performance.

Skills

SOC / Detection & Response

SIEM management

MITRE ATT&CK mapping

KQL / SPL

Cloud logs

Python scripting

Incident response

Tools

SOAR

UEBA

AWS CloudTrail

GuardDuty

Google Workspace

Job description

Solidgate is seeking an experienced SOC/Detection & Response engineer to own the security operations in a fast‑growing fintech environment. You will build and operate the SIEM, design rules mapped to MITRE ATT&CK, and lead incident response in a regulated payments platform.

Join a senior team, own log onboarding from AWS, JumpCloud, and Google Workspace, run threat hunts, produce monthly metrics, and craft runbooks.