Security Operations Engineer

Job not on LinkedIn

🔥 16 hours ago

🌐 France, Germany, +1 more countries – Remote

🇫🇷 France – Remote 🇩🇪 Germany – Remote 🇪🇸 Spain – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

EPI Company

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

EPI Company is reshaping the future of payments with Wero, a European-made digital payments solution that enables instant, cross-border transactions for consumers and businesses. The company operates as a remote-first, Europe-based team building payment platform and wallet products, focusing on digital sovereignty, compliance, and seamless payment experiences across markets.

📋 Description

• Act as a central point of contact for alert triage, incident identification and security event investigation across EPI environments • Execute incident response activities using structured frameworks such as SANS PICERL • Conduct proactive, hypothesis-driven threat hunts based on attacker behaviour, emerging threats, threat intelligence and MITRE ATT&CK techniques • Parse, analyse and correlate logs from authentication, application, system, endpoint and cloud telemetry sources, including AWS and Azure • Design, tune and maintain detection rules, use cases, dashboards, custom alerts and automation workflows • Contribute to SOC playbooks, runbooks, SIEM and EDR integrations • Document and communicate threat findings, incident outcomes and remediation recommendations • Collaborate with engineering, SOC, IR and IT teams to improve detection coverage, response readiness and operational resilience

🎯 Requirements

• +5 years of experience in cybersecurity, with strong hands-on experience as a SOC analyst, incident responder, detection engineer or similar role • Fluent in English (CEFR C1 or C2); French, German, Dutch or other European languages are a plus • Strong familiarity with the full SOC lifecycle, from Tier 1 to Tier 3, including alert triage, incident response, threat hunting and threat intelligence • Proven experience in threat hunting, detection engineering or threat intelligence • Solid understanding of SIEM and EDR technologies, log parsing, detection engineering and alert tuning • Hands-on experience with Python, PowerShell or KQL • Ability to analyse and correlate logs from authentication, application, system and cloud telemetry across AWS and Azure • Knowledge of attacker TTPs, MITRE ATT&CK, threat exposure and attack path analysis • Experience creating or improving incident response playbooks, runbooks and automation workflows • Strong communication skills with technical and non-technical stakeholders • Willingness to participate in a 24/7 on-call rotation, approximately one week per month • Experience with Rapid7 and TaHiTI is a nice-to-have • Familiarity with Microsoft Entra ID is a nice-to-have • GSEC, GCIH, BTL1/2, SC-200 or AZ-500 certifications are nice-to-have • Experience in payments, banking, fintech or another highly regulated environment is a nice-to-have

🏖️ Benefits

• Remote-first culture with quarterly and annual all-staff in-person meetups • Possibility to work from another EU country for up to 3 months per year • Competitive compensation package featuring salary and performance-based bonus • High-quality benefits programme • Learning & development budget: €5,000 training budget per year