Security Engineer

Join our team as a Security Engineer in a modern SOC environment. This hands-on role focuses on security engineering, automation, cloud security, detection engineering, and AI-assisted security operations. You will build, operate, and improve security workflows, integrations, detection processes, and operational tooling. The ideal candidate has 2-3 years of cybersecurity experience, strong SOC foundation, hands-on AWS knowledge, Python proficiency, and experience with SIEM data and log pipelines.

• Contribuer à la construction, à l'exploitation et à l'amélioration d'un SOC moderne en utilisant l'automatisation, les flux de travail agentiques et l'ingénierie de la sécurité.
• Aider à concevoir, configurer, maintenir et dépanner les flux d'ingestion de journaux dans le SIEM à partir d'AWS, d'applications, d'infrastructures, d'outils de point de terminaison et de plateformes de sécurité.
• Développer des scripts Python et des automatisations pour l'enrichissement des alertes, le traitement des données, la génération de rapports et l'amélioration des flux de travail.

• The ideal candidate has 2–3 years of cybersecurity experience, a strong SOC foundation, hands-on AWS knowledge, Python proficiency, and experience working with SIEM data and log pipelines. We are looking for someone motivated, curious, and eager to grow into a stronger security engineer within a modern, engineering-driven SOC model
• AWS Certification: AWS entry-level certification required at minimum, such as AWS Certified Cloud Practitioner. AWS Solutions Architect – Associate or AWS Security Specialty is a plus
• AWS Knowledge: Working knowledge of AWS services, cloud security fundamentals, logging, monitoring, IAM, and basic cloud architecture
• Python Proficiency: Hands-on proficiency with Python for scripting, automation, data processing, security tooling, or workflow development
• Detection Knowledge: Ability to help develop, tune, and improve detections based on logs, threat behavior, and operational needs
• Log Pipeline Experience: Experience building, maintaining, or troubleshooting log flows from applications, infrastructure, AWS services, endpoint tools, or security platforms into a SIEM
• Agentic SOC Familiarity: Familiarity with agentic concepts, agentic frameworks, AI-assisted workflows, autonomous or semi-autonomous agents, and practical security operations use cases
• SIEM Experience: Experience working with SIEM platforms, including log ingestion, parsing, alerting, dashboards, and detection logic
• SOC Foundation: Strong understanding of SOC workflows, alert triage, investigation, escalation, and incident response processes
• Experience: 2–3 years of experience in cybersecurity, SOC operations, security engineering, cloud security, detection engineering, or incident response
• Infrastructure as Code: Familiarity with Terraform, CloudFormation, CDK, or similar tools
• Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages
• Agentic/AI Security Use Cases: Hands-on exposure to LLMs, AI agents, agentic workflows, or AI-assisted security operations