Infrastructure Security Engineer
Blockchain.com12 days ago
Paris, FranceSenior
Responsibilities
- Design and implement security controls, automation, and processes across product, platform, and infrastructure environments.
- Identify security gaps and lead engineering initiatives to remediate them.
- Integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures with SRE and engineering teams.
- Build tooling to enforce secure configurations, detect misconfigurations, and support continuous compliance.
- Contribute to threat modeling, design reviews, architectural assessments, security documentation, and developer guidance.
- Support security incident response with engineering expertise and automation.
- Research and safely embed AI utilities and LLM agents into secure infrastructure.
Requirements
- 4+ years of experience in security engineering, platform security, or DevSecOps roles.
- Hands-on experience implementing security controls and automation in cloud environments, preferably GCP or AWS.
- Proficiency with modern scripting, automation, and infrastructure as code, such as Python, Bash, Go, or Terraform.
- Ability to translate security requirements into practical, scalable solutions while collaborating with engineering teams.
- Familiarity with Cloudflare, SIEM tools such as Splunk or Elastic, incident-management platforms such as Incident.io or PagerDuty, CI/CD systems such as GitHub Actions, Concourse, or CircleCI, and HIDS systems, preferably Wazuh.
- Knowledge of security standards and governance frameworks such as CIS Benchmarks, NIST, SOC 2, ISO 27001, or PCI DSS is a plus.
- Preferred experience includes maintaining SIEM systems, securing consumer-facing web and iOS or Android applications, administering Vault and other HashiCorp products, and managing security vendors.
Benefits
- Unlimited vacation and books policies.
- Apple equipment.
- Meaningful equity and a full-time salary based on experience; no base salary amount is stated.
- Role based in the Paris office with mandatory in-office presence four days per week.
- Remote work from anywhere in the world for up to 20 days per year.
Tech Stack
Categories