Detection Engineer, HarfangLab

• Strong interest in cybersecurity and Cyber Threat Intelligence
• Reliable, diligent, and collaborative
• Curious, proactive, resourceful, and able to work autonomously
• Passionate about learning, sharing knowledge, and discussing technical topics
• At least 2–3+ years of hands-on experience in Cyber Threat Intelligence, Detection Engineering, Malware Analysis, or a related cybersecurity field
• Proficient in Python with working knowledge of Rust and/or C
• Strong understanding of Windows, Linux, and ideally macOS internals
• Experience in system and/or network administration
• Good knowledge of attack techniques and adversary tradecraft
• Hands-on experience in malware reverse engineering
• Experience creating and maintaining detection rules (YARA, Sigma, IDS/IPS, EDR detections). This is a key requirement for the role
• Fluent in French and English
• Familiar with AI-powered tools and their application to CTI activities

Desirable

• The company's growth continues, and our ecosystem of technology partners is expanding day by day. We are receiving more and more requests to integrate our product with other cybersecurity solutions
• As a Detection Engineer, you will be responsible for improving our EDR detection capabilities by transforming threat intelligence into actionable detections
• You will continuously monitor the threat landscape, design and maintain Sigma and YARA rules, validate detection quality, and identify opportunities to strengthen the product against new attack techniques
• Continuously monitor the threat landscape and analyze emerging threats, malware, and attacker techniques
• Design, develop, and maintain detection content, primarily Sigma rules for behavioral detections and YARA rules for malware identification
• Validate, tune, and monitor detection rules to ensure their effectiveness while minimizing false positives
• Research new detection opportunities and prototype improvements to strengthen the EDR detection engine
• Develop internal tools and automation to accelerate threat research and detection engineering workflows
• Contribute to threat reports, blog posts, and internal or external communications on the evolving threat landscape
• Provide technical guidance and expertise to selected customers when required
• You will evolve inside a team of 7 people who are very keen to continuously make sure the product is able to efficiently detect cyberthreats
• Like every team at HarfangLab, we have a lot of autonomy, and we have great confidence in our colleagues
• You will also be able to drive your own projects based on your preferences

• A 30-minutes Visio with our Talent Acquisition Specialist
• A 30 minutes Visio with the lead
• A test to assess your skills
• A 1,5 hour on-site interview including a teamfit
• A final HR video appointment to review your soft skills and motivations