Automation Lead - Cybersecurity

Context

As the CyberSecurity Automation Team Lead within the Equans CSIRT, you will lead the design, development, and continuous improvement of the CSIRT cybersecurity automation and detection capabilities. This automation service supports the entire SLS CyberDefense team, from Incident Handlers to Vulnerability Management.

You will manage a team of automation engineers while remaining hands-on, contributing directly to the development of automated workflows, integrations, and detection use cases. Acting as both a technical expert and team leader, you will coordinate with cyber defense analysts, incident handlers, and other SLS CyberDefense functions to identify automation opportunities, translate operational needs into SOAR workflows, and continuously improve detection and response capabilities.

In parallel, you will lead and mentor a team of automation engineers, organize workload and priorities, and foster a culture of collaboration, innovation, and technical excellence. You will act as the primary point of contact for automation topics, interfacing with internal stakeholders and reporting to the Head of CSIRT on project progress, challenges, and strategic initiatives.

Missions

• Ensure effective task allocation, prioritization, and workload balance across a team of 3 to 4 engineers
• Deliver projects on time, within scope, and with defined quality standards
• Enforce best practices in development, testing, and deployment
• Improve CI/CD workflow to deliver and maintain detection rules across SLS CyberDefense security tools
• Reduce analyst workload and alert fatigue through advanced automation and AI-driven processes
• Foster innovation within SLS CyberDefense by leveraging AI, orchestration, and emerging technologies
• Maintain and evolve 130+ operational playbooks ranging from automated enrichment, remediation, and processes
• Ensure operational maintenance and relevance of 400+ detection rules deployed and managed through Detection as Code workflow
• Integrate AI into alert triage and investigation support to reduce alert fatigue and enhance Equans' global posture
• Dedicate time for training
• Lead technical knowledge sharing through workshops, technical meetings with the team, and highlight presentations for SLS CyberDefense

Tools & Environment

• SOAR (TORQ) & Security Automation
• CI/CD & DevSecOps
• Detection Engineering
• SIEM Engineering
• AI for Cybersecurity

1. Expert in SOAR (TORQ) and Security Automation
2. Confirmed level skills in Detection Engineering
3. Confirmed level skills in CI/CD & DevSecOps
4. Confirmed level skills in SIEM Engineering
5. Confirmed level skills in AI for Cybersecurity