2 days ago
Paris, FranceStaff+
Responsibilities
- Identify and prioritize AppSec needs with Security Engineering, Product Security, and development teams.
- Design, prototype, implement, maintain, industrialize, and integrate SSDLC Toolbox capabilities such as secrets scanning, SCA, SAST, DAST, IDE integrations, and MCP servers.
- Coach developers and help integrate SSDLC tools into CI/CD pipelines, development workflows, and platforms.
- Experiment with AI agents for vulnerability triage, analysis, remediation, merge-request and pull-request generation, MCP integration, and automated controls.
- Collaborate with Security Engineering and development-platform teams to implement AppSec capabilities and controls.
- Create documentation and guidelines to support adoption of AppSec tools and practices.
Requirements
- Strong software-development experience with indispensable Python expertise and good knowledge of at least one of C#, C++, Go, or JavaScript.
- Ability to understand, reproduce, and remediate application vulnerabilities, including major OWASP vulnerability categories and secure-coding issues.
- Experience designing and prototyping solutions through adoption by a pilot team, including experimentation in AI-native SDLC contexts.
- Experience with CI/CD, DevOps, DevSecOps, and integrating security tools into development workflows.
- Knowledge of software supply-chain security, secrets management, vulnerability management, and threat modeling.
- Experience using AI agents such as Claude, MCP, and Copilot in development and security workflows.
- Ability to work as a technical pair and coach peers or developers.
- Strong interpersonal and communication skills, French-English bilingualism, autonomy, and adaptability.
Benefits
- Permanent contract with office-based work in Saint-Mandé, with workplace flexibility details provided by Ubisoft.
- Participation and employee savings plan, 25 days of paid leave, 12 RTT days, 50% public-transport reimbursement, meal vouchers, health insurance, and other Ubisoft benefits.
- Twenty weeks of maternity leave and seven weeks of paternity/co-parental leave.
- On-site gym.
Tech Stack
Categories
About Ubisoft
Ubisoft develops and publishes video games for console, PC, and mobile players worldwide, monetized through premium titles, downloadable content, live services, and the Ubisoft+ subscription. Founded in 1986 and headquartered in Saint-Mandé, France, it operates studios globally and is publicly traded on Euronext Paris. Franchises include Assassin’s Creed, Far Cry, Tom Clancy’s Rainbow Six, and Just Dance.