Detection Engineering Specialist (W/M/X)

Ubisoft is a global leader in gaming with teams across the world creating original and memorable gaming experiences, from Assassin’s Creed, Rainbow Six, to Just Dance and more. We believe diverse perspectives help both players and teams thrive. If you’re passionate about innovation and pushing entertainment boundaries, join our journey and help us create the unknown!

As a Detection Engineering Specialist, you will act as a technical expert responsible for advancing Ubisoft’s detection engineering capabilities through modern software engineering, automation, cloud-native technologies, and Detection-as-Code practices.

Working closely with Security Operations, Incident Response, Platform Engineering, and Development teams, you will help transform our existing detection ecosystem into a scalable and maintainable engineering platform. The ideal candidate combines strong DevOps and software engineering skills with a passion for automation, cloud technologies, and security-focused problem solving.

You will evaluate telemetry and enrichment sources, design and maintain detection content, build integrations and automation, and contribute to the adoption of engineering best practices that improve the speed, quality, and reliability of security detections across Ubisoft's global environment.

Responsibilities

• Evaluate log sources, telemetry feeds, and enrichment data to determine their quality, structure, coverage, and detection value.
• Design, develop, test, document, deploy, and maintain detection rules, frameworks, and supporting technologies.
• Drive the migration of detection content into a Detection-as-Code model using version control and modern software development methodologies.
• Develop and maintain CI/CD pipelines to automate validation, testing, deployment, and lifecycle management of detection content.
• Build integrations and workflows leveraging APIs and MCP-based interactions across SIEM platforms, EDR solutions, ticketing systems, cloud services, and data repositories.
• Develop automation solutions that improve operational efficiency and reduce manual effort.
• Collaborate with Security Operations and Incident Response teams to improve detection coverage, fidelity, and investigative capabilities.
• Create reusable tooling, libraries, and frameworks that support detection engineering initiatives.
• Implement secure coding practices, code reviews, testing strategies, and quality controls throughout the engineering lifecycle.
• Support technologies such as Sigma, Sysmon, Falco, and cloud-native security telemetry platforms.
• Contribute to infrastructure automation and platform engineering initiatives involving public cloud and containerized environments.
• Research emerging technologies and innovative approaches that improve detection engineering outcomes.
• Translate business and project requirements into clear technical specifications and implementation plans.
• Communicate complex technical concepts effectively to audiences with varying levels of technical expertise.
• Develop and maintain technical documentation, standards, and operational procedures.

Required

• Experience in software engineering, DevOps, platform engineering, site reliability engineering, or automation-focused roles.
• Strong experience with Git-based development workflows and source control management.
• Experience designing and maintaining CI/CD pipelines.
• Proficiency in one or more programming or scripting languages such as Python, Go, PowerShell, JavaScript, or similar.
• Experience integrating platforms and services through APIs.
• Strong understanding of software development best practices, testing methodologies, and secure coding principles.
• Experience working with modern cloud platforms and infrastructure technologies.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong communication skills with the ability to bridge technical and non-technical stakeholders.
• Ability to translate business requirements into technical requirements and effectively communicate those requirements to development teams.

Preferred

• Experience in Detection Engineering, Security Operations, Threat Detection, Incident Response, or Security Engineering.
• Familiarity with SIEM, EDR, and enterprise logging platforms.
• Experience with Sigma rules, Sysmon, Falco, or related detection technologies.
• Experience with Docker, Kubernetes, and containerized environments.
• Experience with AWS, Azure, GCP, or multi-cloud environments.
• Knowledge of MITRE ATT&CK, OWASP, and modern detection methodologies.
• Experience leveraging AI-powered development workflows, including agentic coding, automated code review, unit testing, linting, context management, and iterative improvement processes.
• Familiarity with MCP (Model Context Protocol), AI skills development, and AI-assisted engineering workflows.

Key Attributes

The ideal candidate is a builder, problem solver, and collaborator who enjoys combining software engineering, automation, cloud technologies, and security challenges.

You thrive in dynamic environments, are comfortable learning new technologies, and continuously seek opportunities to improve processes and systems. Your ability to combine technical depth with clear communication and practical execution will be instrumental in the evolution of Ubisoft’s detection engineering capabilities.

Ubisoft's perks

Profit Sharing, yearly company saving plan. 25 paid time off + 12 additional paid days off. 50% of your transportation pass is paid by the company, lunch vouchers (9€/day), healthcare for you and your family, and lots of Ubisoft additional perks.

Maternity leaves of 20 weeks, paternity/co-parental leaves of 7 weeks.

Our office is located in Saint Mandé, (Metro line 1, Saint Mandé station).

Information about Ubisoft

Ubisoft offers the same job opportunities to all, without any distinction of gender, ethnicity, religion, sexual orientation, social status, disability, or age. Ubisoft ensures the development of an inclusive work environment which mirrors the diversity of our gamers’ community.