4 days ago
Vélizy-Villacoublay, FranceSenior
Responsibilities
- Act as the primary HarfangLab detection contact and support the skills development of internal teams.
- Deploy, tune, and evolve client detection capabilities and maintain associated detection matrices.
- Develop detection strategy, coverage, and rules, including through MITRE ATT&CK.
- Deploy and optimize detection capabilities within client SIEM environments.
- Support clients in continuously improving and evolving their security monitoring.
- Automate and industrialize detection methods and tools.
- Investigate security incidents and contribute to detection innovation, customer presentations, demonstrations, projects, and commercial proposals.
Requirements
- Engineering school degree or equivalent.
- At least 3 years of experience in security incident detection.
- Strong HarfangLab expertise, including rule implementation and modification, use-case and response-sheet writing, alert handling, and true-positive investigations.
- Understanding of the value of artificial intelligence and interest in detection automation.
- Interest in cybersecurity, cybercriminal and state-sponsored threats, and cyber defense.
- Strong knowledge of HarfangLab EDR and at least one SIEM solution, such as Splunk, Microsoft Sentinel, Chronicle, or Sekoia.
- Knowledge of at least one SOAR solution, such as Cortex XSOAR or Sekoia.
- Broad cybersecurity knowledge covering vulnerabilities, threats, and current events, plus general systems and networks knowledge.
- Good written and spoken English.
- GitLab, Python, Bash, and/or a SANS certification are advantageous.
- Curiosity, passion for cybersecurity, and ability to work collaboratively are expected.
Benefits
- Attractive compensation package, with no base salary amount specified.
- Continuous professional development through training programs, academies, and internal communities.
- Inclusive and supportive work environment with attention to work-life balance.
- Access to an innovative Thales campus environment with services supporting professional and personal life.
- Position is based at Elancourt, Vélizy, and Maison LAFITTE sites in France.
- The role may require a national defense security clearance procedure.
About Thales
Thales designs and sells defense, aerospace, space, and digital identity/cybersecurity systems to governments, armed forces, infrastructure operators, and enterprises. Its portfolio spans avionics, radars and sensors, satellites, air traffic management, secure communications, and cybersecurity and identity solutions (bolstered by the 2019 Gemalto acquisition). Headquartered in Meudon, France, Thales is publicly traded on Euronext Paris (HO) and reported €20.6 billion in sales in 2024.