Lead Security Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Ensure secure access to cloud infrastructure, production systems, and workstations.

• Develop centralized identity management utilizing SSO, SCIM, and robust MFA.

• Implement the principle of least privilege and oversee temporary, auditable privilege escalations.

• Safeguard employee onboarding, team transitions, and offboarding processes, including for contractors.

• Manage the password manager and service accounts effectively.

• Secure multi-account AWS environments, deployment platforms, CDNs, and WAFs.

• Transition from static secrets to ephemeral identities and automate their rotation.

• Strengthen configurations and perform security reviews on new architectures.

• Oversee fleet security using MDM, encryption, and updates.

• Implement a zero-trust strategy for critical tools.

• Centralize security logs and establish meaningful alerts.

• Lead security incidents from detection through to post-mortem analysis.

• Mitigate credential stuffing, account takeovers, card testing, mass account creation, scraping, and DDoS attacks.

• Conduct internal penetration tests and security code evaluations.

• Lead external penetration testing efforts and potentially manage a bug bounty program.

• Enhance team awareness through training sessions, guides, and phishing simulations.

• Assist teams in writing secure code.

• Conduct security audits across various departments over time.

• Contribute gradually to ISO 27001, SOC 2, and PCI DSS initiatives.

• Collaborate directly with the CTO and work alongside the DevOps engineer, supporting around 25 developers organized into squads.

• Engage with the Tech, Risk & Payments teams and department heads.

⛳️ Requirements

• Proven experience in independently managing the security function for a company or a broad scope.

• Demonstrated ability to lead real security incidents from start to finish.

• Capacity to prioritize tasks based on actual risk assessments.

• Ideally, experience in a company or team that has implemented a compliance program.

• Familiarity with ISO 27001, SOC 2, or PCI DSS audits is an advantage.

• Experience with fraud and abuse in B2C products that handle payments is a significant plus.

• Strong understanding of AWS cloud security and its native tools: IAM, Organizations, SCPs, CloudTrail, and GuardDuty.

• Expertise in web and API penetration testing, including knowledge of the OWASP Top 10 and vulnerability exploitation.

• Proficiency with penetration-testing tools, ideally enhanced by AI technologies.

• Strong automation mindset with experience in Python, scripting, and Go.

• Knowledge of SAML, OIDC, SCIM, MFA, and the principle of least privilege.

• Understanding of CDN/WAF, DNS, deployment platforms, and secrets management security.

• OSCP, OSWE, AWS Security Specialty, CISSP, or equivalent certifications are advantageous.

• Fluent French is required.

• English proficiency at a minimum of B2 level is required and will be assessed during the recruitment process.

• Availability to work within the CET ±4-hour time zone range.

🏝️ Benefits

• €200 monthly budget for coworking expenses.

• Flexible paid time off policy.

• Flexible working hours.

• Option to work remotely from a different time zone for one month.

• Budget for essential equipment such as a laptop, desk, chair, monitor, and headset.

• Two company offsite events each year.

• Opportunities for professional development.

• Culture that fosters innovation.

• Career advancement opportunities in a rapidly growing company.

• Inclusive workplace atmosphere.

• Dedicated budget for tools and resources.

• Access to leading cloud models and security-focused open-source tools.

• Remote work flexibility from anywhere in Europe.

• A culture built on trust, flexibility, and respect for individual working rhythms.