Detection Engineer
HarfangLabover 2 years ago
Paris, FranceMid Level
Responsibilities
- Monitor the threat landscape and analyze emerging threats, malware, and attacker techniques.
- Design, develop, maintain, validate, tune, and monitor Sigma and YARA detection rules.
- Research detection opportunities and prototype improvements to strengthen the EDR detection engine.
- Develop internal tools and automation to accelerate threat research and detection engineering workflows.
- Contribute to threat reports, blog posts, and internal or external communications about the threat landscape.
- Provide technical guidance to selected customers when required.
Requirements
- At least 2–3+ years of hands-on experience in cyber threat intelligence, detection engineering, malware analysis, or a related cybersecurity field.
- Proficiency in Python and working knowledge of Rust and/or C.
- Strong understanding of Windows and Linux internals, with macOS knowledge preferred.
- Experience in system and/or network administration.
- Knowledge of attack techniques and adversary tradecraft.
- Hands-on experience in malware reverse engineering.
- Experience creating and maintaining YARA, Sigma, IDS/IPS, and EDR detection rules.
- Fluency in French and English.
- Familiarity with AI-powered tools and their application to cyber threat intelligence activities.
- Incident response, red team, penetration testing, blue team, SOC, threat actor tracking, and actionable threat intelligence experience are bonuses.
Benefits
- Base salary of €45,000 to €57,000 plus profit sharing.
- Flexible remote work options; offices are located near Bourse in Paris.
- High-quality equipment based on individual preferences and needs, including PC, Mac, and additional screens.
- Onboarding with a mentor during the probationary period.
- Health insurance through Alan.
- Meal vouchers through Swile and access to a works council discount platform.
- Seven to eleven additional RTT days per year plus 25 days of paid vacation.
- GymLib subscription covered 80% by HarfangLab.
- Access to training and professional events.
- Recruitment process includes video interviews, a skills test, an on-site team-fit interview, and a final HR video appointment.