Automation Lead (Cybersecurity)

Location: 92400 Courbevoie, France; onsite workplace.

Company

hirify.global is a global energy and services company providing technical expertise across engineering, digital solutions, IT, cybersecurity, telecommunications, and related infrastructure services.

What you will do

• Lead and mentor a team of 3–5 cybersecurity automation specialists, allocating work, setting priorities, reviewing designs and code, and managing technical development.
• Design, develop, maintain, and optimize SOAR workflows and playbooks in Torq for the SLS CyberDefense organization.
• Build integrations with SIEM, EDR, threat intelligence, ticketing, and other security tools using APIs and scripting.
• Develop and maintain Detection-as-Code frameworks, detection rules, CI/CD pipelines, and lifecycle management processes.
• Design and tune detection use cases aligned with evolving threats, reducing false positives and improving signal quality.
• Integrate AI-driven alert triage, enrichment, and investigation support while serving as the technical expert for automation and detection engineering.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field.
• At least 4–5 years of cybersecurity experience, including 3+ years of hands-on experience in cybersecurity automation, detection engineering, or SOAR environments, ideally in a CSIRT or SOC.
• Knowledge of automation and orchestration, detection engineering, incident response, scripting, and development practices.
• Experience with KQL, Microsoft Sentinel and Defender, EDR solutions, cloud environments, SOAR platforms, cybersecurity playbooks, APIs or GraphQL, and Python scripting.
• Understanding of SIEM, EDR/XDR, threat intelligence platforms, case management, incident investigation, escalation, and Detection-as-Code practices.
• Ability to design scalable workflows and integrations, translate operational needs into technical solutions, and tune detection rules.
• Strong technical leadership, analytical and problem-solving skills, communication, collaboration, accountability, and continuous-learning mindset.
• Fluent English required for work in an international and distributed environment.

Nice to have

• GIAC GCIA, Microsoft SC-200, Palo Alto xSOAR, or other relevant cybersecurity and SOAR certifications.

Culture & Benefits

• Work with a CyberDefense organization supporting approximately 95,000 identities, 60,000 workstations, and 6,500 servers, with 80% of IT hosted on Azure and AWS.
• Participate in high-impact cybersecurity projects and collaboration networks focused on real-world challenges.
• Contribute ideas in an environment valuing excellence, innovation, mutual support, and empowered decision-making.
• Access tailored training, hands-on experience, workshops, and technical knowledge-sharing opportunities.