Responsibilities
- Enhance security across products, data, and infrastructure through secure coding, code reviews, threat modeling, vulnerability management, and hardening of cloud and network environments.
- Build automated security controls integrated into CI/CD pipelines, including static application security testing, software composition analysis, and secrets detection.
- Create secure system designs for applications, APIs, data pathways, and integrations in collaboration with development teams.
- Ensure consistent security standards in hybrid environments that include virtual machines, containerized applications, and cloud-native services.
- Identify risks proactively using continuous scanning, threat modeling workshops, risk evaluations, and architectural reviews.
- Support engineering teams in adopting secure-by-design principles by providing expert guidance, building internal tools, and conducting security training.
- Participate in on-call duties, analyze security incidents, and refine incident response procedures.
- Lead initiatives to improve security through automation, tooling enhancements, process optimization, and promoting accountability for security.
Work Arrangement
Hybrid — France
