About the Position

Senior Security Operations Engineer

Team: Security

Location: Paris, FR

Employment Type: Full-Time

Location Type: Hybrid

Responsibilities

As a Senior Security Operations Engineer, you will:

Operate the SOC:
- Analyze, classify, and prioritize alerts from various sources (Splunk, CrowdStrike, Wiz, AWS, etc.).
- Conduct in-depth investigations into incidents affecting endpoints, the cloud, identities, SaaS, workloads, and infrastructure.
- Provide clear, actionable context to inform next steps and serve as an escalation point for less experienced analysts.
Visibility & Detection:
- Build and tune cloud detection use cases (AWS, IAM activity, EKS/Kubernetes, container workloads).
- Integrate and maintain necessary log sources (cloud, endpoints, identities, SaaS, infrastructure, Kubernetes) and improve data quality.
- Identify visibility blind spots and work with various teams to reduce them.
- Design, write, and optimize Splunk queries; develop new detection use cases based on available logs, refine them, and document their logic; reduce noise and improve signal quality.
Incident Response:
- Play a leading role in investigations: gathering evidence, reconstructing timelines, and documenting actions taken.
- Monitor containment, remediation, and post-incident measures.
- Turn lessons learned into sustainable improvements and formalize processes: detection mechanisms, runbooks, dashboards, and automations.
Contribute to Automation and our Agentic SOC:
- Build and maintain automations (Torq/SOAR, scripts, APIs) that accelerate triage, enrichment, and response.
- Contribute to the design and continuous improvement of the internal Agentic SOC-the AI system that investigates weak signals, enriches alerts, and assists with investigations-and expand its capabilities: new investigation workflows, better correlation, and tighter integration with detection and response.

Requirements

Solid & proven experience in SecOps, SOC, cloud security, incident response, or infrastructure security, with a track record of building and improving SOC capabilities (logs, detections, dashboards, automations, runbooks, workflows) and conducting independent investigations.
Comfortable working in cloud and SaaS environments and with rapidly evolving technologies.
Proficiency in SecOps fundamentals: triage, investigation, incident response, log analysis, and documentation.
Strong, hands-on cloud security skills (ideally AWS): investigating IAM and identity activity, analyzing cloud audit logs (e.g. CloudTrail, GuardDuty), securing workloads, containers, and Kubernetes (EKS), and scoping cloud incidents end-to-end. Comfortable with exposure/CSPM tooling (ideally Wiz).
SIEM (ideally Splunk) with the ability to write queries for investigation and detection; EDR (ideally CrowdStrike).
Automation using Python, Bash, APIs, GitHub Actions, SOAR, or equivalent.
Interest in-or experience with-AI applied to security, agent-based workflows, and SOC automation.
Diligence, independence, technical curiosity, and attention to detail.
Ability to conduct in-depth investigations, document findings clearly, and escalate issues with the appropriate level of context; awareness of confidentiality and the proper handling of sensitive information.
Professional-level English; Ledger operates in an international environment.

We Offer

At Ledger, we are dedicated to continually investing in our employees, helping them excel both professionally and personally. That’s why we offer more than just salaries; we provide comprehensive compensation packages that include a wide range of benefits.

In addition to our global benefits offerings, we provide a number of benefits and wellness programs tailored to specific regional offices. For details about benefits available in your location, please speak with your Talent Acquisition contact during the application process. You can also learn more by visiting our Benefits page.

About the Company

We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators, and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures.

If you want to make a true impact, we want you to join us at Ledger.

At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow, and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 million units already sold in 200 countries.

Application Process

Learn what to expect if you apply for a role with Ledger.

Application received: You have submitted your application with Ledger.
Application Review: Our Talent Acquisition team will carefully review your application and experience to see if there’s a good match.
Screening: You’ll have a call with one of our recruiters to get to know you better and discuss your background.
Hiring Manager Interview: You’ll then meet the hiring manager to discuss the role and expectations in more detail.
Deep Dive Interview/Skills Assessment: Depending on the role you have applied for, you may be asked to complete a business case or a specific skills assessment.
Final Interview: This is typically the last stage, conducted with a senior team member for the final assessment.

Connect with Us

Take your first step in becoming a member of the Ledger Community. Fill out the form below to begin your application.

Senior Security Operations Engineer

Tech Stack

Job Description, Responsibilities & Requirements