Ledger

4 weeks ago

Senior Security Operations Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Lead investigations end-to-end in Ledger’s Security Operations Center, manage detections, dashboards, and automations, and expand visibility across cloud, endpoints, identities, and SaaS. You’ll mentor junior analysts, decide containment/remediation steps, and drive improvements to the Agentic SOC, using Splunk, CrowdStrike, Wiz, and AWS to reduce noise and accelerate incident response.

Location: Paris

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Lead investigations from start to finish in the SOC, manage the lifecycle of detections, dashboards, and automations, and expand visibility (cloud, endpoints, identities, SaaS, infrastructure).
•Collaborate with junior analysts, review their work, and act as a technical escalation point to resolve complex incidents.
•Design, write, and optimize Splunk queries; develop new detection use cases based on available logs; refine them and document their logic to reduce noise and improve signal quality.
•Build and tune cloud detection use cases (AWS, IAM activity, EKS/Kubernetes, container workloads) and track cloud exposure using Wiz as part of detection work.
•Contribute to incident response by gathering evidence, reconstructing timelines, monitoring containment/remediation, and documenting actions taken.

Key Requirements

•Solid experience in SecOps, SOC, cloud security, incident response, or infrastructure security with a track record of building and improving SOC capabilities (logs, detections, dashboards, automations, runbooks, workflows) and conducting independent investigations.
•Comfortable working in cloud and SaaS environments with rapidly evolving technologies.
•Proficiency in SecOps fundamentals: triage, investigation, incident response, log analysis, and documentation.
•Strong hands-on cloud security skills (ideally AWS): investigating IAM and identity activity, analyzing cloud audit logs (CloudTrail, GuardDuty), securing workloads, containers, and Kubernetes (EKS), and scoping cloud incidents end-to-end; comfortable with exposure/CSPM tooling (ideally Wiz).
•SIEM (ideally Splunk) with the ability to write queries for investigation and detection; EDR (ideally CrowdStrike)

Experience:CybersecurityCloud securitySecurity operations

Skills:SplunkCrowdStrikeWizTorqAWSKubernetesPythonBash

Languages:English

Tech Stack:SplunkCrowdStrikeWizTorqAWSKubernetesPythonBash

Company Brief

Ledger

Ledger designs and sells hardware wallets and security infrastructure for digital assets and Web3, offering consumer devices (Nano S/X, Stax), Ledger Live software, and enterprise custody solutions to secure cryptocurrencies and NFTs.

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series C

Headquarters: Paris, France

Founded: 2014

Glassdoor: 3.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Ledger

4 weeks ago

Senior Security Operations Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Paris

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Lead investigations from start to finish in the SOC, manage the lifecycle of detections, dashboards, and automations, and expand visibility (cloud, endpoints, identities, SaaS, infrastructure).
•Collaborate with junior analysts, review their work, and act as a technical escalation point to resolve complex incidents.
•Design, write, and optimize Splunk queries; develop new detection use cases based on available logs; refine them and document their logic to reduce noise and improve signal quality.
•Build and tune cloud detection use cases (AWS, IAM activity, EKS/Kubernetes, container workloads) and track cloud exposure using Wiz as part of detection work.
•Contribute to incident response by gathering evidence, reconstructing timelines, monitoring containment/remediation, and documenting actions taken.

Key Requirements

•Solid experience in SecOps, SOC, cloud security, incident response, or infrastructure security with a track record of building and improving SOC capabilities (logs, detections, dashboards, automations, runbooks, workflows) and conducting independent investigations.
•Comfortable working in cloud and SaaS environments with rapidly evolving technologies.
•Proficiency in SecOps fundamentals: triage, investigation, incident response, log analysis, and documentation.
•Strong hands-on cloud security skills (ideally AWS): investigating IAM and identity activity, analyzing cloud audit logs (CloudTrail, GuardDuty), securing workloads, containers, and Kubernetes (EKS), and scoping cloud incidents end-to-end; comfortable with exposure/CSPM tooling (ideally Wiz).
•SIEM (ideally Splunk) with the ability to write queries for investigation and detection; EDR (ideally CrowdStrike)

Experience:CybersecurityCloud securitySecurity operations

Skills:SplunkCrowdStrikeWizTorqAWSKubernetesPythonBash

Languages:English

Tech Stack:SplunkCrowdStrikeWizTorqAWSKubernetesPythonBash

Company Brief

Ledger

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series C

Headquarters: Paris, France

Founded: 2014

Glassdoor: 3.9

Website LinkedIn Glassdoor