CyberSecurity Engineer – Incident Response Lead

About the role

Mistral AI is seeking a senior CyberSecurity Engineer to lead incident response and digital forensics across its AI ecosystem. Reporting to the SOC Lead, you will own the full lifecycle of high‑severity security events, act as incident commander during crises, and help shape the organization’s response methodology.

Key responsibilities

• Own end‑to‑end incident response for critical security incidents, from triage to remediation and post‑mortem.
• Serve as incident commander, coordinating technical teams and stakeholders during high‑pressure events.
• Develop, maintain, and test runbooks covering the most important risk scenarios.
• Build and operate forensic capabilities across cloud, containerized, on‑premises, and endpoint environments.
• Collect, preserve, and analyze digital evidence using repeatable forensic methods.
• Partner with SOC and Detection Engineering to improve detection‑to‑response workflows.
• Design and facilitate tabletop exercises with engineering, legal, communications, and leadership teams.
• Lead blameless post‑mortems and translate lessons learned into technical and organizational improvements.

Required profile

• Significant experience leading complex incident response and digital forensics investigations in cloud‑native or high‑stakes technology environments.
• Proven ability to command critical incidents and guide cross‑functional teams.
• Strong communication skills for both technical and non‑technical audiences.
• Track record of building or improving incident response processes and tooling.

Required skills

• Cloud environments (AWS, Azure, GCP or similar)
• Containerization technologies (Docker, Kubernetes)
• Digital forensics techniques and tools
• Incident response lifecycle management
• Security Operations Center (SOC) operations
• Detection engineering and workflow integration
• Runbook development and tabletop exercise facilitation