Cyber Security Engineer providing a range of cyber security services at Thales. Focus on detection improvement and client support in security incident management.
Responsibilities
Within Thales, our Thales Cyber Solutions teams provide a broad spectrum of cybersecurity services, ranging from cyber governance to advanced technical expertise.
Contribute to the continuous improvement of clients' detection coverage.
Ensure the creation and evolution of clients' detection matrices in connection with intelligence reported by Harfanglab.
Provide your Harfanglab expertise to support commercial proposals and projects.
Work on the coverage and depth of monitoring, using frameworks such as MITRE ATT&CK.
Participate in client steering committees and conduct reviews and continuous improvement activities.
Deploy and tune detection rules within clients' SIEM platforms.
Improve, automate and industrialize our methods and tools to increase detection efficiency and performance.
Requirements
Degree from an engineering school or equivalent.
At least 3 years' experience in security incident detection.
Strong mastery of the Harfanglab solution (implementing/modifying rules, writing use-cases and runbooks, handling alerts and investigating true-positive tickets, etc.).
Interest in automation and, in particular, Artificial Intelligence.
A genuine interest in cybersecurity challenges, cybercriminal and state-sponsored threats, and more broadly in Cyber Defence.
Proficiency with GitLab, Python/Bash and/or a SANS certification is a real plus.
Very good knowledge of the Harfanglab EDR solution.
Proficiency with at least one SIEM solution (Splunk, Microsoft Sentinel, Chronicle, SEKOIA, etc.).
Familiarity with at least one SOAR solution (xSOAR, SEKOIA, etc.).
Solid cybersecurity awareness (vulnerabilities, threats, industry news, etc.).
Good overall knowledge of systems and network infrastructures.
A good command of written and spoken English is essential.
Benefits
An attractive compensation package.
Continuous skills development: training programs, academies and internal communities.
An inclusive, supportive environment that respects employees' work-life balance.
A recognized commitment to social and environmental responsibility.
Campus Security Officer ensuring safety at Bright Horizons early childcare centers in Seattle. Responsible for access control, surveillance, and emergency response.
Sounding and Security Watch responsible for Navy asset security at NSF Diego Garcia. Conducting checks and ensuring safety during designated watch hours with strong situational awareness.
Sales Enablement Manager creating technical content for Upwind Security. Collaborating across teams to translate cloud security concepts into clear narratives for engineers and security leaders.
Security Engineer designing and implementing security measures to protect Snap Inc.'s infrastructure. Collaborating across teams while focusing on threat detection and response strategies.
IT Security & Compliance Head at Lonza leading security strategy and managing global risk. Collaboration with senior leadership to enhance information security across Capsules & Health Ingredients business.
Senior Security Manager leading security for Sanofi meetings and events across North America. Ensuring compliance with global meeting policies and managing event security operations in high - stake environments.
Security Officer maintaining safety protocols at Aloft New Orleans. Responsible for patrolling, monitoring security systems, and assisting guests with safety - related concerns.
Security Detection Specialist responsible for detecting cybersecurity incidents using advanced security technologies. Analyzing data feeds and leveraging security tools for incident detection and reporting.
Senior Incident Response Engineer at Walmart focusing on security threat campaigns to enhance detection and response capabilities. Collaborating with SOC and engineering teams to improve security posture.
Head of Infrastructure & Security at Kinatico, a RegTech leader, focused on cloud infrastructure and security governance. Leading a technically deep team of cloud engineers and security specialists in a hybrid environment.