Job Opportunities API

Who we are? HarfangLab is a French scale-up specializing in cybersecurity that develops EDR (Endpoint Detection and Response), EPP (Endpoint Protection Platform ), and ASM (Attack Surface Management) solutions to detect and neutralize modern cyberattacks targeting an organization’s workstations and servers . Our engines, models, and algorithms identify abnormal behaviors and either generate security alerts or block program execution. Since our creation in 2018, HarfangLab’s technology has received strong industry recognition , earning prestigious distinctions and becoming the first EDR to be certified by ANSSI in 2020, and later the first to obtain ANSSI qualification in 2025. We are also proud to have joined the French Tech 2030 program alongside 80 other innovative French companies, at a time when cyber resilience has become a major strategic priority for Europe. We have raised a total of €30 million, enabling us to strengthen our teams, growing from 40 employees in 2023 to 130 today, and expand internationally across Europe . Today, HarfangLab protects the endpoints of more than 800 clients of all sizes and across all sectors: CAC 40 industrial companies, government entities, SMEs, hospitals, and local authorities. With a strong collective spirit and international ambitions, HarfangLab continues its expansion while remaining true to its original mission: protecting organizations against increasingly complex cyber threats while enabling clients to retain full control over their data. Why are we hiring?  The company's growth continues, and our ecosystem of technology partners is expanding day by day. We are receiving more and more requests to integrate our product with other cybersecurity solutions. What you will do with us? As a Detection Engineer, you will be responsible for improving our EDR detection capabilities by transforming threat intelligence into actionable detections . You will continuously monitor the threat landscape, design and maintain Sigma and YARA rules, validate detection quality, and identify opportunities to strengthen the product against new attack techniques. Continuously monitor the threat landscape and analyze emerging threats, malware, and attacker techniques. Design, develop, and maintain detection content, primarily Sigma rules for behavioral detections and YARA rules for malware identification. Validate, tune, and monitor detection rules to ensure their effectiveness while minimizing false positives. Research new detection opportunities and prototype improvements to strengthen the EDR detection engine. Develop internal tools and automation to accelerate threat research and detection engineering workflows. Contribute to threat reports, blog posts, and internal or external communications on the evolving threat landscape. Provide technical guidance and expertise to selected customers when required. About you Soft Skills Strong interest in cybersecurity and Cyber Threat Intelligence. Reliable, diligent, and collaborative. Curious, proactive, resourceful, and able to work autonomously. Passionate about learning, sharing knowledge, and discussing technical topics. Hard Skills At least 2–3+ years of hands-on experience in Cyber Threat Intelligence, Detection Engineering, Malware Analysis, or a related cybersecurity field. Proficient in Python with working knowledge of Rust and/or C. Strong understanding of Windows, Linux, and ideally macOS internals. Experience in system and/or network administration. Good knowledge of attack techniques and adversary tradecraft. Hands-on experience in malware reverse engineering. Experience creating and maintaining detection rules (YARA, Sigma, IDS/IPS, EDR detections). This is a key requirement for the role. Fluent in French and English. Familiar with AI-powered to