Principal Security Engineer – Product & Infrastructure

This is a fully remote position, open to applicants in France.

📋 Description

• Report directly to the CISO and take charge of Pigment's security roadmap encompassing product, infrastructure, and CI/CD.

• Analyze code, create threat models for new services, reproduce and assess vulnerabilities, review infrastructure configurations, and develop automation to address gaps.

• Establish technical security direction and influence product and engineering teams through technical credibility.

• Design security features for products and enhance the platform's defense-in-depth strategy.

• Review code, architecture, and configurations; evaluate risks and provide well-rounded solutions.

• Conduct assurance activities, including reviews, red team exercises, and bug bounty initiatives.

• Manage relationships with third-party auditors and oversee KPIs that support certifications.

• Take ownership of vulnerabilities from detection to confirmed remediation.

• Develop detection capabilities, establish detection rules, and create incident-response playbooks.

• Lead comprehensive production security and fraud investigations.

• Create secure SDLC guidelines, paved pathways, and instructive review processes.

• Secure the design and development of AI features, including MCP Server and Modeler Agent.

• Assess AI-assisted security analysis in conjunction with SAST and SCA.

• Transition GitHub to managed identities and CI to short-lived OIDC credentials.

• Design agent identity utilizing delegated access tokens and token exchange mechanisms.

• Promote least privilege practices throughout production and CI/CD.

⛳️ Requirements

• Minimum of 8 years of experience in security as a Security Engineer, Pentester, or Security Consultant.

• Extensive expertise in product and/or infrastructure security.

• Proven experience managing a security roadmap for a product or platform from start to finish.

• Demonstrated ability to drive security initiatives through engineering teams without direct authority.

• Experience in making critical architectural decisions and serving as an escalation point.

• Practical experience across development, databases, networking, and web technologies.

• Hands-on working style; this position does not involve people management.

• Proficient in English.

• French language skills are a significant advantage.

🏝️ Benefits

• Competitive salary package.

• Stock options to ensure you have a stake in Pigment's growth.

• Comprehensive health insurance with Alan Blue, completely free for you and your family.

• Weekly lunch provisions and lunch vouchers (Swile card) to support your flexible lunch breaks.

• Subscription to Egym Wellpass (formerly Gymlib) for full access to gyms, studios, and wellness facilities across France.

• Annual Learning Stipend to facilitate your development in areas that enhance your career or personal growth.

• Remote work stipend to ensure you have an optimal workstation at home.

• An annual company offsite event.

• Brand new offices located in major cities including New York, San Francisco, Toronto, Paris, and London.

• High-quality equipment (subject to stock availability) to support your work in the best possible conditions.