CTI Engineer - Cybersecurity

As a CTI Engineer, your primary role will be to conduct threat intelligence analysis to contribute to the maintenance and enhancement of the product's detection capabilities.

• Conduct continuous monitoring and threat intelligence analysis.
• Propose and prototype new detection methods / rules to enhance the product's capabilities.
• Develop internal tools and automation solutions to optimize workflows, accelerate threat intelligence analysis, and improve the team's operational capabilities.
• Take part in communication efforts regarding the current threat landscape
• Additionally, you may also be required to provide support and guidance to specific clients.

• You ideally have a strong interest in cybersecurity or related fields,
• You are recognized for your reliability and your diligence and teamwork is important to you,
• You are resourceful, curious, able to take initiatives and you can work autonomously,
• You are passionate, you enjoy learning and sharing your knowledge with others, and discussing technical topics

Hard skills

• You are proficient with Python and you have good knowledge of Rust/C,
• You have a good understanding of internals of Windows, Linux and ideally macOS Operating Systems,
• Experience in system administration and/or network administration, which would be useful to conduct tests,
• Familiarity with different attack techniques,
• You are fluent in French and English (both written and spoken)
• You are familiar with AI-powered tools and know how to leverage them effectively to support Cyber Threat Intelligence activities

Bonus skills

• Reverse Engineering Experience,
• Incident Response Experience,
• Red Team/Intrusion testing Experience,
• Blue Team/SOC Experience., You will evolve inside a team of 7 people who are very keen to continuously make sure the product is able to efficiently detect cyberthreats. Like every team at HarfangLab, we have a lot of autonomy, and we have great confidence in our colleagues. You will also be able to drive your own projects based on your preferences.

Our office and Team Life:

• Offices located in the heart of Paris, near Bourse (75002),
• High-quality equipment based on preferences and needs (PC, Mac, additional screens, etc.),
• Thanks to our Office Manager, we regularly organize events such as seminars, happy hours, themed evenings, and more,
• An onboarding process to welcome each new colleague with an explanation of the roles and a mentor to support you during your early days!"
• A great team that always seeks to improve their skills

And more:

• An attractive package: Base salary + profit sharing,

• Flexible remote work options,

• A mentor to guide you throughout your probationary period,

• Health insurance: The best health insurance with Alan,

• Meal vouchers: We use the Swile card and also have access to a discount platform through our works council,

• 7 to 11 additional days off (RTT) per year, in addition to the 25 days of paid vacation. GymLib subscription, covered 80% by HarfangLab,

• Access to training and events of your choice and according to your professional needs.

Le processus de recrutement * A 30-minutes Visio with our Talent Acquisition Specialist

• A 30 minutes Visio with the lead
• A test to assess your skills
• A 1,5 hour on-site interview including a teamfit
• A final HR video appointment to review your soft skills and motivations.

HarfangLab is a French scale-up specializing in cybersecurity that develops EDR (Endpoint Detection and Response), EPP (Endpoint Protection Platform ), and ASM (Attack Surface Management) solutions to detect and neutralize modern cyberattacks targeting an organization's workstations and servers. Our engines, models, and algorithms identify abnormal behaviors and either generate security alerts or block program execution. Since our creation in 2018, HarfangLab's technology has received strong industry recognition, earning prestigious distinctions and becoming the first EDR to be certified by ANSSI in 2020, and later the first to obtain ANSSI qualification in 2025. We are also proud to have joined the French Tech 2030 program alongside 80 other innovative French companies, at a time when cyber resilience has become a major strategic priority for Europe. We have raised a total of €30 million, enabling us to strengthen our teams, growing from 40 employees in 2023 to 130 today, and expand internationally across Europe. Today, HarfangLab protects the endpoints of more than 800 clients of all sizes and across all sectors: CAC 40 industrial companies, government entities, SMEs, hospitals, and local authorities. With a strong collective spirit and international ambitions, HarfangLab continues its expansion while remaining true to its original mission: protecting organizations against increasingly complex cyber threats while enabling clients to retain full control over their data.