Security Operations Engineer

About The Company
Ledger is a global leader in digital asset security and Web3 solutions, committed to empowering individuals, creators, and enterprises with true ownership and financial freedom. With a dedicated team of approximately 600 professionals and headquarters in Paris, complemented by offices across Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich, and Central Singapore, Ledger has established itself as a pioneer in the industry. Their flagship products, including the Ledger hardware wallets, have sold over 7.5 million units across more than 200 countries, securing over 20% of the world's crypto assets. Ledger's mission is to make self-custody accessible, providing users with the tools and keys to manage their digital assets securely and independently. The company fosters a culture of innovation, problem-solving, and continuous learning, aiming to revolutionize the way digital assets are protected and managed worldwide.

About The Role
Ledger is seeking a highly experienced Staff Security Operations Engineer to join its Security Operations team. In this critical role, you will serve as the primary technical expert responsible for incident management, threat hunting, and the strategic development of detection and response capabilities. Your expertise will help safeguard Ledger’s internal environments, cloud infrastructure, endpoints, and data centers from evolving cyber threats. You will lead the response to complex security incidents, conduct in-depth investigations, and develop robust detection strategies. Additionally, you will play a key role in designing and evolving the architecture of our SIEM, SOAR, and internal Agentic SOC systems, ensuring they are optimized for efficiency and effectiveness. This position offers a unique opportunity to influence security strategies at a global scale, working with cutting-edge tools and AI-driven automation to enhance Ledger’s security posture. You will also mentor and guide junior engineers, fostering a culture of continuous improvement and technical excellence. Qualifications 9+ years of experience in security operations, incident response, and CSIRT roles Proven expertise in incident management, threat hunting, and detection engineering Deep knowledge of SIEM platforms, preferably Splunk, and SOAR platforms such as Torq Strong understanding of cloud security, especially AWS (IAM, logs, network configurations, Kubernetes, containers) Experience with cloud security tools like Wiz, CSPM, and CNAPP Hands-on experience with endpoint detection and response (EDR), ideally CrowdStrike Advanced skills in forensic analysis and complex end-to-end investigation capabilities Proficiency in automation using Python, Bash, APIs, GitHub Actions, or similar tools Solid understanding of infrastructure, networking, CI/CD pipelines, and log/data pipelines Interest or experience in applying AI to security operations and SOC automation Excellent communication and leadership skills, with a proven ability to mentor and lead technical teams Responsibilities Serve as the primary point of contact and coordinator for complex security incidents across all environments Lead end-to-end investigations, including root cause analysis, forensics, timeline reconstruction, and remediation Define and implement the team’s detection strategy, architecture, and threat hunting methodologies Leverage threat intelligence (CTI and OSINT) to proactively identify and mitigate risks Design, build, and optimize the SIEM (Splunk) architecture and SOAR workflows to enhance detection and response capabilities Develop and maintain the internal Agentic SOC, including automation, alert enrichment, and reporting processes Implement cloud security best practices, focusing on AWS and Kubernetes environments, to harden infrastructure and reduce exposure Establish standards, playbooks, and runbooks for security operations, ensuring consistency and best practices Mentor and develop junior and senior security engineers, fostering a culture of continuous learning and improvement Collaborate with engineering, infrastructure, and cloud teams to align security initiatives with organizational goals Benefits Competitive salary and performance-based bonuses Comprehensive health and wellness benefits Flexible

working hours
and remote work options Opportunities for professional growth and development in a cutting-edge industry Access to innovative tools and technologies, including AI-driven security automation Participation in a dynamic, global team committed to technological innovation and security excellence Equal Opportunity Ledger is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of race, gender, age, religion, sexual orientation, disability, or any other characteristic protected by law. We believe that diverse perspectives foster innovation and drive our mission to make digital asset security accessible and reliable worldwide.