> Markdown version of [/jobs/ext/2274991-cloud-security-specialist-detection-engineering](https://www.wearedevelopers.com/jobs/ext/2274991-cloud-security-specialist-detection-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Specialist - Detection Engineering - **Company:** Ubisoft Entertainment. - **Location:** Saint-Mandé, France - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Audit Trail, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Computer Telephony Integration, Continuous Integration, DevOps, Github, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Network Segmentation, Security Information and Event Management, Data Logging, Pulumi, Scripting, Google Cloud, Cloud Platform System, DevOps Tools - Open-source, Large Language Models, Prompt Engineering, Mitre Att&ck, Cloudformation, Build Management, Gitlab-ci, Kubernetes, Cybercrime, Terraform, Splunk, Jenkins - **Published:** August 28, 2026 - **Apply:** https://jobs.smartrecruiters.com/Ubisoft2/744000145918119-cloud-security-specialist-detection-engineering ## About the Role * Significant hands-on experience operating, building, or securing public cloud environments (AWS, Azure, or GCP) as a cloud engineer, DevOps engineer, SRE, or cloud security specialist; * Solid understanding of CI/CD pipelines and tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, etc.) and how they get attacked; * Familiarity with infrastructure-as-code (Terraform, CloudFormation, Pulumi) and cloud-native logging/telemetry (CloudTrail, Azure Activity Log, GCP Audit Logs, etc.); * Scripting ability (Python, Go, or similar) to build detection logic and automate analysis and response; * Solid grasp of cloud security fundamentals: IAM, network segmentation, container/Kubernetes security, secrets management; * Experience or strong interest in applying LLMs/GenAI to security use cases (prompt engineering, RAG, agentic workflows) is a significant asset; * Experience building security automation or orchestration (SOAR platforms, custom workflow engines, scripted response) is a plus; * No prior SOC or detection engineering experience required - what matters is a strong analytical mindset and genuine interest in threat detection; you will be trained on Splunk content development, threat hunting methodology, and detection engineering practice; * Cloud or security certification is an asset (AWS/Azure/GCP security specialty, CKS, GCDA, or equivalent). ## Description As a Cloud Security Specialist joining Ubisoft's Detection Engineering team within the SOC, you design, build, and tune the detection content that catches attacks against Ubisoft's cloud infrastructure, CI/CD pipelines, and DevOps tooling. Your value comes from deep, hands-on knowledge of how cloud environments and pipelines actually work - gained as a cloud, DevOps, or CI/CD engineer - which you will apply, with dedicated mentoring and training, to detection engineering methodology, SIEM content development, and threat hunting. You are not securing or building cloud infrastructure in this role: you are hunting and detecting the attackers who target it, and increasingly, using LLMs and GenAI to do it faster and building the automation that responds once a threat is confirmed., * Develop and maintain detection content (Splunk/SIEM, cloud-native logging, IDS) targeting attacks against cloud infrastructure, IAM, containers/Kubernetes, and CI/CD pipelines; * Define detection engineering processes and standards specific to cloud and DevOps attack surfaces; * Conduct threat hunting engagements across cloud environments and CI/CD telemetry; * Research attacker TTPs targeting cloud and CI/CD (MITRE ATT&CK for Cloud, supply chain attacks, IAM abuse, container escape, pipeline poisoning) and translate them into detection logic; * Leverage LLMs and GenAI to accelerate detection engineering work - generating and tuning detection logic, summarizing and enriching alerts, and speeding up hunting and triage; * Design and build automated response playbooks (SOAR or custom orchestration) that contain or remediate cloud/CI-CD threats without manual intervention; * Validate detection coverage through purple-teaming and adversary emulation against cloud environments; * Mentor SOC analysts on investigating cloud-related alerts and the data sources available to them; * Work with CTI and Incident Response to convert cloud threat intelligence into new detections and response automation; * Identify logging and telemetry gaps in cloud/CI-CD systems that limit detection coverage, and drive requirements back to platform teams. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)