> Markdown version of [/jobs/ext/1433514-detection-engineer-cyber-secu-h-f](https://www.wearedevelopers.com/jobs/ext/1433514-detection-engineer-cyber-secu-h-f). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Detection Engineer Cyber Sécu H/F

- **Company:** TEKsystems
- **Location:** La Défense, France (Remote available)
- **Experience:** Experienced
- **Contract:** Contract
- **Skills:** ARM Architecture, Python (Programming Language), Windows PowerShell, Scripting, Mitre Att&ck, Tactics, Techniques and Procedures (TTPs)
- **Published:** July 25, 2026
- **Apply:** https://www.hellowork.com/fr-fr/emplois/81684102.html

## About the Role

Profil recherchéCandidate profilexpérience :5 ans en SOC / CSIRT (niveau N3)2 ans minimum en Detection EngineeringSolide connaissance des tactiques, techniques et procédures (TTP)Maîtrise des environnements de détection avancésCompétences techniquesFramework : MITRE ATT&CKOutils : Palo Alto Cortex XSIAMScripting : Python, PowerShellCertifications (souhaitées)GIAC SEC599 (Defeating Advanced Adversaries)GIAC SEC699 (Purple Teaming / Detection Engineering), + 5 ans en SOC / CSIRT (niveau N3)

 + 2 ans minimum en Detection Engineering
 * Solide connaissance des tactiques, techniques et procédures (TTP)
 * Maîtrise des environnements de détection avancés

Compétences techniques

 * Framework : MITRE ATT&CK
 * Outils : Palo Alto Cortex XSIAM
 * Scripting : Python, PowerShell

Certifications (souhaitées)

 * GIAC SEC599 (Defeating Advanced Adversaries), PowerShell
Altoffice
Python
Scripting

## Description

Développer et maintenir des cas d'usage de détection basés sur le framework MITRE ATT&CK

 - Exploiter et configurer la plateforme Palo Alto Cortex XSIAM
 - Améliorer les règles existantes (tuning, réduction des faux positifs)
 - Collaborer avec les équipes SOC/CSIRT (N3) pour le retour d'expérience incident
 - Automatiser les processus de détection et d'investigation via scripting
 - Assurer une veille sur les nouvelles menaces et techniques d'attaque


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Unleashing the Full Potential of the Arm Architecture – Write Once, Deploy Anywhere](https://www.wearedevelopers.com/videos/940-unleashing-the-full-potential-of-the-arm-architecture-write-once-deploy-anywhere)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [An Architect’s guide to reducing the carbon footprint of your applications](https://www.wearedevelopers.com/videos/559-an-architect-s-guide-to-reducing-the-carbon-footprint-of-your-applications)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies to Work For in Paris: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/190-best-companies-to-work-for-in-paris-top-25-companies-in-2023)
- [Best Companies to Work For in France: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/189-best-companies-to-work-for-in-france-top-25-companies-in-2023)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)