Security Engineer
Security Operations Engineer
Paris
Apply on the employer's siteRole description
About The Company
Ledger is a pioneering leader in the digital asset security space, dedicated to enabling individuals, creators, and enterprises to manage their digital assets with confidence and ownership. With a global presence spanning Paris, Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore, Ledger has established itself as the trusted platform for securing over 20% of the world’s crypto assets through its innovative hardware wallets and comprehensive suite of products and services. Our mission is to democratize access to self-custody solutions, empowering users worldwide to take control of their financial futures. Committed to continuous innovation, Ledger fosters a culture of problem-solving and technical excellence, driven by curiosity and a shared vision of making blockchain technology accessible for all.
About The Role
We are seeking a highly skilled and experienced Staff Security Operations Engineer to join our Security Operations team. This critical role involves leading incident management efforts, developing and refining detection strategies, and architecting our security infrastructure to safeguard Ledger’s corporate, cloud, SaaS, and data center environments. As a key technical expert, you will be responsible for managing complex security incidents, spearheading proactive threat hunting initiatives, and shaping the security architecture that underpins our detection and response capabilities. You will also oversee the evolution of our internal Agentic SOC, integrating new log sources, automating workflows, and ensuring our security systems remain at the forefront of industry standards. This individual contributor role requires a deep understanding of cloud security, incident response, SIEM and SOAR platforms, and automation, with a focus on leveraging AI to enhance operational efficiency.
Qualifications
- 9+ years of experience in security operations, incident response, and CSIRT roles
- Proven expertise in incident management, threat hunting, and detection engineering
- Deep knowledge of SIEM platforms, preferably Splunk, and SOAR solutions such as Torq
- Strong understanding of cloud security, especially AWS, EKS/Kubernetes, and cloud security tools like Wiz
- Hands-on experience with EDR solutions, ideally CrowdStrike
- Advanced skills in forensic analysis and complex end-to-end incident investigations
- Proficiency in automation scripting languages such as Python, Bash, and API integrations
- Solid understanding of cloud infrastructure, networking, containers, and CI/CD pipelines
- Interest or experience in applying AI to security operations and SOC automation
- Excellent communication and mentorship skills, capable of guiding technical teams and establishing security standards
Responsibilities
- Serve as the primary incident response lead for complex and critical security events across all environments
- Conduct comprehensive investigations, including root cause analysis, forensic analysis, timeline reconstruction, and remediation planning
- Define and implement detection strategies, architecture, and methodologies to identify emerging threats proactively
- Lead threat hunting activities utilizing CTI and OSINT sources to identify risks before they materialize
- Design, optimize, and maintain the SIEM (Splunk) architecture and workflows within the SOAR (Torq) environment
- Develop and evolve the internal Agentic SOC, automating alert enrichment, investigation workflows, and reporting
- Apply deep expertise in cloud security to harden AWS environments, including IAM, network configurations, and container security
- Establish security standards, playbooks, and runbooks to improve operational efficiency and incident response consistency
- Mentor and develop the technical skills of security engineers and analysts within the team
- Collaborate closely with Engineering, Infrastructure, and Cloud teams to align security initiatives with organizational goals
Benefits
- Competitive salary and comprehensive benefits package
- Opportunities for professional growth and continuous learning
- Engagement with cutting-edge security technologies and AI-driven automation
- Collaborative and innovative work environment
- Global team with diverse cultural perspectives
- Flexible work arrangements where applicable
Equal Opportunity
Ledger is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, disability, or any other protected status. We believe that diverse teams foster innovation and drive our success forward.
This is a saved copy of a posting published elsewhere. Postings get taken down without notice — check the employer's site before applying. mentors.coach is not the hiring party.