Threat Intelligence & Detection Engineer

Jobtailor; Paris; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Jobtailor is seeking an experienced cybersecurity analyst to design advanced detection scenarios and maintain IoC repositories tied to OSINT, dark web, and partner sources. You will evaluate new feeds, develop incident response playbooks, and contribute to SIEM/EDR use cases.

In this role you will support awareness campaigns, monitor real-time alerts, conduct in-depth attack analyses, and produce intelligence reports and post-incident RETEX analyses for major incidents.

Qualifications

• 5 years of experience in demanding operational cybersecurity environments.

Responsabilités

• Design advanced detection scenarios based on the TTPs of APT groups and cybercriminals
• Define and maintain the repository of indicators of compromise (IoCs) derived from OSINT, the dark web, and partner sources
• Evaluate and integrate new intelligence feeds and cyber threat monitoring solutions
• Contribute to the development of incident response playbooks and SIEM/EDR use cases
• Support employee awareness campaigns on security best practices
• Monitor alert streams in real time and enrich investigations with relevant IoCs
• Perform in-depth technical analysis of ongoing attacks
• Continuously collect and analyze information from open, closed, and partner sources
• Participate in on-call rotations and technical crisis committees for major incidents
• Write and distribute intelligence reports, threat bulletins, and post‑incident (RETEX) analyses

Connaissances

Threat hunting

OSINT collection

Threat intelligence

Incident response

Log analysis

Outils

Splunk

QRadar

CrowdStrike

SentinelOne

STIX/TAXII

MISP

Description du poste

Jobtailor is seeking an experienced cybersecurity analyst to design advanced detection scenarios and maintain IoC repositories tied to OSINT, dark web, and partner sources. You will evaluate new feeds, develop incident response playbooks, and contribute to SIEM/EDR use cases.

In this role you will support awareness campaigns, monitor real-time alerts, conduct in-depth attack analyses, and produce intelligence reports and post-incident RETEX analyses for major incidents.