About the Position

Staff SecOps Engineer

Team: Security
Location: Paris, FR
Employment Type: Full-time
Location Type: Hybrid

We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators, and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures. If you want to make a true impact, we want you to join us at Ledger.

At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow, and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 million units already sold in 200 countries.

Responsibilities

As a Staff Security Operations Engineer, you’ll be one of the most senior technical voices on the team: a hands-on generalist who can dig deep into any layer of our stack, step back to see the whole picture, and bring clear, calm judgment when the stakes are highest.

Anchor critical-incident response (CSIRT):
- Bring senior technical leadership to our most complex incidents - cloud, corporate, endpoints, identities, data center - working with the team, not in isolation.
- Lead complex investigations end to end, alongside the team: root cause analysis, forensics, timeline reconstruction, and remediation that prevents recurrence.
- Be a trusted escalation point, and keep our handling, escalation, and documentation rigorous and consistent.
Set the direction on detection & threat hunting:
- Set the direction of our detection strategy, architecture, and methodology - with the team - and bring a clear point of view on where to invest next.
- Contribute to proactive threat hunting - turning CTI and OSINT into risks caught before they reach Ledger.
- Take on our thorniest detection problems and translate threat intel into concrete posture improvements.
Evolve the architecture & the Agentic SOC:
- Drive how our Splunk and Torq (SOAR) setup evolves so detection, triage, and response keep getting better - focused on detection quality, data standardization (CIM, data models), and usability, not day-to-day platform administration.
- Contribute to the architecture of our Agentic SOC and log/data pipeline, and help automate the team’s reporting. (No need to arrive as a software/data engineer - an engineering mindset and the drive to build matter more.)
- Bring cloud-security judgment (AWS, EKS/Kubernetes) and use Wiz to prioritize exposure at scale.
Raise the bar across the team:
- Define the standards, playbooks, and runbooks the team relies on.
- Grow senior and junior engineers through review, pairing, and everyday knowledge sharing - a force multiplier through influence and example, not formal management.
- Partner with Engineering, Infrastructure, IT, and Cloud to align operational security with where Ledger is heading.

Requirements

~9 years (or a track record that speaks for itself) in security operations, incident response, and CSIRT, with real depth in complex, end-to-end investigations.
The ability to lead technically under pressure and stay structured when things are ambiguous.
Hands-on SIEM experience (ideally Splunk): writing and refining queries for investigation and detection.
Solid cloud-security fundamentals (ideally AWS): IAM/identity, audit logs (CloudTrail, GuardDuty), and a working understanding of workloads, containers, and Kubernetes (EKS) - enough to scope and investigate a cloud or container incident, and go deeper as needed.
Comfort automating with Python, Bash, APIs, GitHub Actions, or a SOAR platform.
Clear communication of complex topics, strong documentation habits, and sound judgment with sensitive information.

We Offer

Competitive salary range: $1.0 - $1,000,000.0 USD per year
Comprehensive benefits and wellness programs tailored to specific regional offices
Opportunity to work in a dynamic, global community of over 50 nationalities
Environment built on trust, agility, and the shared mission of securing economic freedom for all

About the Company

At Ledger, we invite you to do the best work of your career by joining a team dedicated to the future of digital ownership. Our culture is defined by our 9 principles, where we empower you with extreme ownership to solve high-stakes security challenges without the friction of traditional hierarchy. You’ll collaborate across a transparent, global community of over 50 nationalities, blending the audacity to disrupt industries with the pragmatism required to protect billions in assets. If you are driven by a craft-first mindset and a desire for genuine impact, you’ll find an environment built on trust, agility, and the shared mission of securing economic freedom for all.

Application Process

Application received: You have submitted your application with Ledger.
Application Review: Our Talent Acquisition team will carefully review your application and experience to see if there’s a good match.
Screening: You’ll have a call with one of our recruiters to get to know you better and discuss your background.
Hiring Manager Interview: You’ll then meet the hiring manager to discuss the role and expectations in more detail.
Deep Dive Interview/Skills Assessment: Depending on the role you have applied for, you may be asked to complete a business case or a specific skills assessment.
Final Interview: This is typically the last stage, conducted with a senior team member for the final assessment.

Connect with Us

Take your first step in becoming a member of the Ledger Community. Fill out the form below to begin your application.

Staff SecOps Engineer

Tech Stack

Job Description, Responsibilities & Requirements