Requirements
- •4+ years of experience in security engineering, platform security, or DevSecOps roles
- •Hands-on experience implementing security controls and automation within cloud environments, GCP or AWS are preferred
- •Proficiency in modern scripting, automation and infrastructure as code e.g. Python, Bash, Go, Terraform, or similar
- •Ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions
- •Strong analytical and problem-solving skills, with a bias toward automation over manual workflows
- •Curiosity, ownership, and a drive to continuously improve the security posture of complex systems
- •Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)
- •Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse, CircleCI)
- •Familiarity with maintaining HIDS systems (Wazuh preferred)
What You'll Do
- •Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments
- •Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them
- •Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures
- •Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance
- •Assist in threat modeling, design reviews, and architectural assessments for new and existing systems
- •Contribute to internal security documentation, best practices, and developer guidance
- •Participate in security incident response when engineering expertise or automation support is needed
- •Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure infrastructure
Nice to Have
- •Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them
- •Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted components
- •Experience securing consumer-facing web and iOS / Android applications
- •Experience designing policies and administering Vault & other Hashicorp products
- •Experience managing security vendors
Benefits
- •Unlimited vacation policy; work hard and take time when you need it
- •Unlimited books policy; order the technical resources you need or simply pick something up from our company library
- •Apple equipment
- •Full-time salary based on experience and meaningful equity in an industry-leading company
- •Role based in our Paris office, with a mandatory in-office presence four days per week
- •Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year
