Manage the full lifecycle of high-priority security incidents, from initial triage through investigation, containment, remediation, recovery, and post-incident analysis.
Serve as the central coordinator during major incidents, directing technical teams and engaging key stakeholders effectively.
Create, update, and validate incident response runbooks tailored to the organization’s top risk scenarios.
Establish and operate forensic capabilities across cloud platforms, container environments, on-premises systems, and endpoints.
Gather, preserve, and examine digital evidence using consistent and defensible forensic techniques.
Collaborate with security operations and detection engineering teams to streamline detection-to-response processes and enhance investigative preparedness.
Design and lead simulated incident exercises involving engineering, legal, communications, and executive teams.
Conduct impartial post-incident reviews and ensure findings lead to lasting technical and procedural improvements.
Define and implement standardized communication and escalation protocols for incidents, tailored to both technical and non-technical audiences.
Support the strategic growth of the incident response function, including potential mentorship or leadership of new team members.

Hybrid — Paris, France

Distributed teams across Europe, North America, Asia, and the Middle East.

Hybrid working model: based in Paris HQ with at least 3 days per week in office. Remote work allowed with manager discretion, especially during summer. Employees expected to maintain regular communication and be available during core working hours.
Comprehensive benefits package including healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
Privacy notice: Applicant data handling described in company's Applicant Privacy policy.

Mistral AI is hiring a CyberSecurity Engineer, Incident Response Lead