Senior Security Operations Engineer

Job description

As a Security Operations Engineer, you will help protect DiliTrust's SaaS platform, cloud infrastructure, networks and production environments. You will join the Infrastructure & Security team, a 12-person team spread across France, Canada and Spain, and work in an international context (Europe, North America and EMA). The infrastructure you will secure is managed in an automated way and counts more than 350 assets hosted across our cloud providers. You will contribute to the continuous improvement of our security posture through monitoring, incident response, vulnerability management, hardening and automation, and you will work closely with infrastructure, DevOps, development and product teams so that security is embedded into our architectures, operations and delivery processes. Missions: In this role, your main responsibilities will include: Security monitoring & incident response · Monitor the security of networks, cloud infrastructure, systems, applications and endpoints. · Administer, configure and continuously improve our security tools, including CNAPP, SIEM, EDR, bastion, ZTNA, PKI, antivirus and WAF solutions. · Continuously evolve our detection mechanisms and threat-detection scenarios. · Investigate security alerts and incidents, support incident handling, and contribute to root-cause analysis, remediation and post-incident reviews. Hardening, vulnerabilities & secure architecture · Implement hardening measures and support vulnerability identification, prioritization, remediation and follow-up through action plans. · Validate the security aspects of IT architectures and application projects. · Actively participate in security audits and penetration tests: scoping, support during the exercise, remediation of findings and follow-up. · Test products and run technical validations on prototype environments before they reach production. Automation & Infrastructure as Code · Automate deployments and security / infrastructure operations using Infrastructure as Code, configuration management and scripting. · Create and maintain security procedures, incident-response playbooks, operational documentation and technical standards. Roadmap, watch & knowledge sharing · Define and deliver the team's security roadmap together with the Hiring Manager and your peers. · Keep an active watch on threats and security news, and share what you learn with the team. Candi…