CDICourbevoie, France
Automation Lead
Hybride
As the CyberSecurity Automation Team Lead within the Equans CSIRT, you will lead the design, development, and continuous improvement of the CSIRT cybersecurity automation and detection capabilities. This automation service is provided to the entire SLS CyberDefense ranging from Incident Handler to Vulnerability management.
You will manage a team of automation engineers while remaining strongly hands-on, contributing directly to the development of automated workflows, integrations, and detection use cases. Acting as both a technical expert and team leader, you will coordinate with cyber defence analysts, incident handlers, and other SLS CyberDefense functions to identify automation opportunities, translate operational needs into SOAR workflow, and continuously improve detection and response capabilities.
In parallel, you will lead and mentor a team of automation engineers, organize workload and priorities, and foster a culture of collaboration, innovation, and technical excellence. You will act as the primary point of contact for automation topics, interfacing with internal stakeholders and reporting to the Head of CSIRT on project progress, challenges, and strategic initiatives.
Ensure effective task allocation, prioritization, and workload balance across a team of 3/4 engineers
• Deliver projects: On time / Within scope / With defined quality standards
• Enforce best practices in development, testing, and deployment
• Improve CICD Workflow to deliver and maintain detection rule across SLS CyberDefense Security tools
• Reduce analyst workload and alert fatigue through advanced automation and AI-driven processes
• Foster innovation within SLS CyberDefense, leveraging AI, orchestration, and emerging technologies
• Maintain and evolve 130+ Playbooks Operational ranging from automated Enrichment / Remediation and Processes.
• Ensure operational maintenance and pertinence of 400+ Detection Rule deployed and managed through Detection as Code Workflow.
• Integrate AI into Alert triage and Investigation support reducing alert fatigue and enhancing Equans global posture
• Dedicate time for training
• Lead technical knowledge sharing through workshops / technical meeting with the team as well as Highlight presentation to for the SLS CyberDefense
Informations de la mission :
You will manage a team of automation engineers while remaining strongly hands-on, contributing directly to the development of automated workflows, integrations, and detection use cases. Acting as both a technical expert and team leader, you will coordinate with cyber defence analysts, incident handlers, and other SLS CyberDefense functions to identify automation opportunities, translate operational needs into SOAR workflow, and continuously improve detection and response capabilities.
In parallel, you will lead and mentor a team of automation engineers, organize workload and priorities, and foster a culture of collaboration, innovation, and technical excellence. You will act as the primary point of contact for automation topics, interfacing with internal stakeholders and reporting to the Head of CSIRT on project progress, challenges, and strategic initiatives.
Ensure effective task allocation, prioritization, and workload balance across a team of 3/4 engineers
• Deliver projects: On time / Within scope / With defined quality standards
• Enforce best practices in development, testing, and deployment
• Improve CICD Workflow to deliver and maintain detection rule across SLS CyberDefense Security tools
• Reduce analyst workload and alert fatigue through advanced automation and AI-driven processes
• Foster innovation within SLS CyberDefense, leveraging AI, orchestration, and emerging technologies
• Maintain and evolve 130+ Playbooks Operational ranging from automated Enrichment / Remediation and Processes.
• Ensure operational maintenance and pertinence of 400+ Detection Rule deployed and managed through Detection as Code Workflow.
• Integrate AI into Alert triage and Investigation support reducing alert fatigue and enhancing Equans global posture
• Dedicate time for training
• Lead technical knowledge sharing through workshops / technical meeting with the team as well as Highlight presentation to for the SLS CyberDefense
Informations de la mission :
- Début de mission : 15/10/2026
- Durée : 3 mois
- Date de publication : 15/10/2026
- Date limite de candidature : 22/10/2026
Compétences recherchées
SOAR (Indispensable)TORQ (Indispensable)Security Automation (Indispensable)Detection Engineering (Indispensable)SIEM (Indispensable)CI/CD (Indispensable)DevSecOps (Indispensable)CICD Workflow (Indispensable)Detection as Code (Indispensable)Playbooks (Indispensable)Detection rules (Indispensable)Enrichment (Indispensable)Remediation (Indispensable)AI (Indispensable)AI-driven processes (Indispensable)Orchestration (Indispensable)Cloud security (Indispensable)CI/CD & DevSecOps (Indispensable)SOAR (TORQ) & Security Automation (Indispensable)SIEM Engineering (Indispensable)AI for Cybersecurity (Indispensable)
Intéressé(e) ?
Rejoignez l'équipe et participez à nos projets ambitieux.