Senior Security Operations Engineer

Stack

Responsibilities

• ▹Analyze, classify, and prioritize alerts (Splunk, CrowdStrike, Wiz, AWS, and other sources); conduct in-depth investigations
• ▹Provide clear, actionable context and serve as an escalation point for junior analysts
• ▹Leverage the in-house Agentic SOC to investigate weak signals and enrich alerts, focusing time on incidents that matter
• ▹Build and tune cloud detection use cases (AWS, IAM, EKS/Kubernetes, container workloads)
• ▹Integrate and maintain log sources, improving data quality
• ▹Identify visibility blind spots and work with IT, Cloud, Infrastructure, and Engineering teams
• ▹Design, write, and optimize Splunk queries; develop and document new detection use cases
• ▹Play a leading role in investigations: evidence gathering, timeline reconstruction, documentation
• ▹Build and maintain automations (Torq/SOAR, scripts, APIs)
• ▹Contribute to the design and continuous improvement of the internal Agentic SOC

Requirements

• ▹Solid, proven experience in SecOps, SOC, cloud security, incident response, or infrastructure security
• ▹Comfortable in cloud and SaaS environments with rapidly evolving technologies
• ▹Proficiency in SecOps fundamentals: triage, investigation, incident response, log analysis, documentation
• ▹Strong, hands-on cloud security skills (ideally AWS): IAM/identity investigation, cloud audit logs (CloudTrail, GuardDuty), workload/container/Kubernetes (EKS) security
• ▹Comfortable with exposure/CSPM tooling (ideally Wiz)
• ▹SIEM experience (ideally Splunk); EDR experience (ideally CrowdStrike)
• ▹Automation using Python, Bash, APIs, GitHub Actions, SOAR, or equivalent
• ▹Interest in or experience with AI applied to security and agent-based workflows
• ▹Professional-level English

Soft skills

About the company

Ledger is the global platform for digital assets and Web3, with over 20% of the world's crypto assets secured through its devices; headquartered in Paris with offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore, a team of ~600, and 7.5+ million hardware wallets sold.