Staff SecOps Engineer

Stack

Responsibilities

• ▹Bring senior technical leadership to Ledger's most complex incidents (cloud, corporate, endpoints, identities, data center)
• ▹Lead complex investigations end to end: root cause analysis, forensics, timeline reconstruction, remediation
• ▹Serve as a trusted escalation point, keeping handling and documentation rigorous and consistent
• ▹Set the direction of detection strategy, architecture, and methodology
• ▹Contribute to proactive threat hunting, turning CTI and OSINT into risks caught before impact
• ▹Drive the evolution of the Splunk and Torq (SOAR) setup
• ▹Contribute to the architecture of the Agentic SOC and log/data pipeline, automating team reporting
• ▹Bring cloud-security judgment (AWS, EKS/Kubernetes), using Wiz to prioritize exposure at scale
• ▹Define standards, playbooks, and runbooks
• ▹Grow senior and junior engineers through review, pairing, and knowledge sharing

Requirements

• ▹~9 years of experience in security operations, incident response, and CSIRT, with real depth in complex, end-to-end investigations
• ▹Ability to lead technically under pressure and stay structured amid ambiguity
• ▹Hands-on SIEM experience (ideally Splunk): writing and refining queries for investigation and detection
• ▹Solid cloud-security fundamentals (ideally AWS): IAM/identity, audit logs (CloudTrail, GuardDuty), workload/container/Kubernetes (EKS)
• ▹Comfortable automating with Python, Bash, APIs, GitHub Actions, or a SOAR platform
• ▹Clear communication of complex topics, strong documentation habits, sound judgment with sensitive information

Soft skills

About the company

Ledger is the global platform for digital assets and Web3, with over 20% of the world's crypto assets secured through its devices; headquartered in Paris with offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore, a team of ~600, and 7.5+ million hardware wallets sold.