CyberSecurity Engineer, SOC Analyst

About the Role

Mistral AI is seeking a Security Operations Center (SOC) Analyst to monitor, detect, and respond to threats across our AI infrastructure and cloud environments. You will build and operationalize detection mechanisms that transform security telemetry into active defense, ensuring continuous protection across IT, engineering, compute, and infrastructure layers.

About the Company

Mistral provides full-stack AI solutions—from frontier models to developer tools and compute infrastructure. We partner with enterprises across finance, manufacturing, defense, healthcare, and the public sector to co-create customized AI systems. Our distributed teams span Europe, North America, Asia, and the Middle East.

Responsibilities

• Partner with engineering and platform teams to centralize security logs across all Mistral environments and ensure comprehensive visibility
• Design, test, and continuously refine alert scenarios and correlation rules to detect anomalous behavior while reducing alert fatigue
• Operationalize Cyber Threat Intelligence (CTI) specific to AI and cloud infrastructure, integrating actionable intelligence into detection pipelines
• Conduct thorough investigations into security alerts, tracking root causes, identifying lateral movement, and assessing impact
• Manage the incident lifecycle from containment through remediation, and coordinate cross-functional crisis response during high-severity events

Requirements

• 3+ years of experience in a Security Operations Center, Incident Response, or Threat Hunting role, preferably in a cloud-native or fast-paced technology environment
• Deep knowledge of the threat landscape, MITRE ATT&CK framework, and methodologies for protecting high-value infrastructure and intellectual property
• Strong proficiency writing complex queries (KQL, Splunk SPL, or equivalent) and leveraging SIEM platforms to build correlation rules and detection logic
• Ability to write automation scripts in Python or Go to interact with security APIs, enrich alert context, and streamline response workflows
• Demonstrated experience in incident response leadership or participation, with a calm, methodical approach to high-pressure situations

Location & Remote Policy

Based in Paris headquarters with an expectation to work in-office at least 3 days per week. Remote flexibility is available based on role autonomy and team context, with managers determining arrangements. Employees must maintain regular team communication and availability during core working hours.

Benefits

Mistral offers a comprehensive benefits package including healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and location-specific perks. Benefits vary by country—refer to the Benefits page for details specific to your location.