Senior Security Operations Engineer

About the Position

Senior Security Operations Engineer

Location: Paris - La Défense

Employment Type: Permanent

Work Mode: Hybrid

---

About the Role

As a Senior Security Operations Engineer at DiliTrust, you will play a crucial role in safeguarding our SaaS platform, cloud infrastructure, networks, and production environments. You will be part of the Infrastructure & Security team, working in an international context across Europe, North America, and EMA.

---

Responsibilities

• Security Monitoring & Incident Response:

  • Monitor the security of networks, cloud infrastructure, systems, applications, and endpoints.
  • Administer, configure, and continuously improve our security tools, including CNAPP, SIEM, EDR, bastion, ZTNA, PKI, antivirus, and WAF solutions.
  • Continuously evolve our detection mechanisms and threat-detection scenarios.
  • Investigate security alerts and incidents, support incident handling, and contribute to root-cause analysis, remediation, and post-incident reviews.

• Hardening, Vulnerabilities & Secure Architecture:

  • Implement hardening measures and support vulnerability identification, prioritization, remediation, and follow-up through action plans.
  • Validate the security aspects of IT architectures and application projects.
  • Actively participate in security audits and penetration tests: scoping, support during the exercise, remediation of findings, and follow-up.
  • Test products and run technical validations on prototype environments before they reach production.

• Automation & Infrastructure as Code:

  • Automate deployments and security/infrastructure operations using Infrastructure as Code, configuration management, and scripting.
  • Create and maintain security procedures, incident-response playbooks, operational documentation, and technical standards.

• Roadmap, Watch & Knowledge Sharing:

  • Define and deliver the team's security roadmap together with the Hiring Manager and your peers.
  • Keep an active watch on threats and security news, and share what you learn with the team.

---

Requirements

• Experience & Seniority:

  • At least 5 years of professional experience in Security Operations, Cybersecurity, Infrastructure Security, Cloud Security, or a related field.
  • Practical experience with security monitoring, incident response, vulnerability management, system hardening, and operational security.

• Mindset & Collaboration:

  • Passionate about cybersecurity and interested in automation and the DevOps culture.
  • Analytical, autonomous, versatile, and rigorous, with a strong sense of service and good synthesis skills.
  • Communicate clearly with both technical and non-technical stakeholders.
  • Enjoy working collaboratively in an international, distributed team and have a good command of English.

• Technical Skills:

  • Required:

    • Good knowledge of Linux (Debian-based environments in particular), Docker, and Kubernetes.
    • Good knowledge of networking, including TCP/IP, DNS, TLS, static routing, VLANs, segmentation, NAT, stateful and application-level firewall rule design, reverse proxies, load balancers, VPN, overlay technologies (WireGuard, IPsec), ZTNA principles, and cloud networking.
    • Ability to manage network and security configurations as code using Infrastructure as Code and automation tools such as Terraform, Ansible, and AWX.
    • Good knowledge of PKI and certificate management: CA hierarchies, certificate lifecycle, TLS/mTLS, key and secret management.
    • Administration of security tools: CNAPP, SIEM, EDR, bastion, ZTNA, and PKI, including interpreting security events and alerts.
    • Hands-on experience with WAF (policy and rule tuning).
    • Familiarity with monitoring tools such as Prometheus, Grafana, and Datadog.
    • Ability to script and automate repetitive operational or security tasks.

  • Nice to Have:

    • Knowledge of Google Cloud Platform or an equivalent cloud environment.
    • An active interest in security news, emerging threats, conferences, and meetups.

---

We Offer

• Competitive salary
• Permanent position
• Hybrid work mode
• Opportunity to work in an international context

---

About the Company

DiliTrust is a leading company in the fintech sector, dedicated to providing secure and reliable solutions for our clients. Our Infrastructure & Security team is spread across France, Canada, and Spain, working together to ensure the highest level of security for our SaaS platform and cloud infrastructure.

---

Application Process

1. Interview with a member of the Talent Acquisition team (30–45 minutes)
2. Technical interview with the SecOps Team Lead and the Team manager, including a practical case study (about 90 minutes)
3. Final interview with the CTO (30 minutes)

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

---

Apply for this job