CyberSecurity, Product Security Engineer
Mistral AI2 months ago
Paris, FranceSenior
Responsibilities
- Serve as the Product Security partner for one or more product organizations.
- Lead threat modeling, security architecture reviews, risk assessments, and secure design assessments.
- Define secure requirements, secure-by-default patterns, and product-specific security validation strategies.
- Review critical designs and production code covering authentication, authorization, tenant isolation, data protection, cryptography, and other security controls.
- Develop security automation, abuse cases, and agent-based security assessments tailored to product architectures and workflows.
- Partner with engineering teams to prioritize and remediate vulnerabilities from code reviews, penetration testing, bug bounty programs, and automated testing.
- Collaborate with Security Engineering on reusable security platforms, developer guardrails, and SDLC-integrated security capabilities.
- Coach engineering teams, lead Security Champion programs, define Product Security metrics, and improve product security practices.
Requirements
- 5+ years of experience in Product Security, Application Security, or Software Engineering with a strong security focus.
- Strong understanding of modern software architecture, distributed systems, APIs, and cloud-native applications.
- Demonstrated experience with threat modeling, architecture reviews, and secure design assessments.
- Deep knowledge of authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows, OWASP Top 10, and CWE.
- Strong software engineering skills in Python, Go, TypeScript, or similar languages, including the ability to review production code and build security automation.
- Experience with manual code review, penetration testing, and bug bounty programs.
- Experience designing product-specific security testing approaches, security automation, or agent-based testing is highly valued.
- Strong understanding of Secure SDLC principles from product design through production deployment and maintenance.
- Excellent communication, influencing, and technical judgment skills with a pragmatic, engineering-first mindset.
Benefits
- Benefits may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal allowances, transportation allowances, and other location-specific perks.
- Benefits vary by country and location.
Tech Stack
Categories
About Mistral AI
Mistral AI builds foundation language models and full‑stack AI solutions for enterprises, offering APIs, on‑prem deployment, developer tools, and applications. The privately held company, founded in 2023 and headquartered in Paris, partners with organizations in finance, manufacturing, defense, healthcare, and the public sector to co‑create customized systems. It releases open‑source models alongside commercial offerings and makes its models available through major cloud marketplaces.