2 months ago
Paris, FranceSenior
Responsibilities
- Partner with developers to embed security into application design, build, and deployment stages.
- Automate vulnerability triage and mitigation workflows.
- Secure GitHub and Jenkins CI/CD pipelines and Kubernetes and Docker execution environments.
- Tune WAFs, manage AWS, GCP, and Azure cloud security, and evolve Terraform practices.
- Support internal teams with secure production access, endpoint hardening, and access policies.
- Lead security reviews across application, infrastructure, and corporate environments.
- Advocate for clear, practical security standards and enable engineering teams to release safely.
Requirements
- Experience with application security practices including code review, threat modeling, and WAFs.
- Experience with cloud security, including IAM, policy-as-code, and workload hardening.
- Experience with endpoint protection, monitoring, and production access control.
- Comfort working across cloud and on-premises environments.
- Ability to prioritize risks, address root causes, take ownership, and communicate clearly with development, operations, and business teams.
- Interest in working with Terraform, Docker, Kubernetes, GitHub Actions, Jenkins, AWS, Azure, and GCP.
- Ability to support security and compliance requirements involving SOC 2 and ISO 27001.
Benefits
- Globally distributed and collaborative team environment with knowledge-sharing sessions, workshops, and asynchronous collaboration.
- Opportunity to attend industry conferences and participate in internal guilds.
- Access to a dedicated security training platform and ongoing development opportunities.
- Employee Resource Groups supporting environmental initiatives, women's empowerment, charitable initiatives, and diversity, equity, and inclusion.
- Equal employment opportunity and commitment to diversity and inclusion.
Tech Stack
Categories
