CyberSecurity Engineer / SOC Analyst

About the role

Mistral AI is seeking a Security Operations Center (SOC) Analyst to monitor, defend, and respond to threats across its AI ecosystem. You will use security telemetry as the core of active defense, ensuring continuous protection of diverse environments including IT, engineering, science, compute, and infrastructure.

Key responsibilities

• Partner with engineering and platform teams to centralize security logs across all environments.
• Design, test, and continuously tune high‑fidelity alert scenarios and correlation rules to detect anomalous behavior while minimizing alert fatigue.
• Operationalize Cyber Threat Intelligence (CTI) and integrate actionable intel into detection pipelines.
• Conduct deep‑dive investigations of security alerts, track root causes, identify lateral movement, and assess impact.
• Drive the incident lifecycle from containment to remediation and coordinate cross‑functional crisis management during high‑severity events.

Required profile

• 3+ years of experience in a SOC, incident response, or threat‑hunting role, preferably in a cloud‑native or fast‑paced tech environment.
• Deep understanding of the threat landscape and the MITRE ATT&CK framework.
• Proven ability to lead or participate in incident response efforts with a calm, methodical approach.

Required skills

• Complex query writing (e.g., KQL, Splunk SPL) and SIEM platform expertise.
• Automation scripting in Python or Go to interact with security APIs.
• Design and implementation of detection rules and correlation logic.
• Experience with Cyber Threat Intelligence (CTI) integration.