Security Engineer – DevSecOps, Code Security

This is a fully remote position, open to applicants in France.

📋 Description

• Perform comprehensive assessments of application security and conduct secure code evaluations for both frontend and backend systems.

• Collaborate with engineering teams to address vulnerabilities and enhance secure coding practices.

• Evaluate and secure Git-based development workflows and branching methodologies.

• Embed security measures into CI/CD pipelines within GitHub and DevSecOps frameworks.

• Support initiatives for cloud-native security in Kubernetes and AWS environments.

• Utilize contemporary application security tools, such as Wiz Code, to detect and prioritize risks.

• Create automation and tools using Python to aid security operations and engineering processes.

• Provide guidance to developers on secure architecture, threat modeling, and best security practices.

• Work in conjunction with DevOps, Platform Engineering, and Software Engineering teams to enhance the overall security posture.

• Assist in vulnerability management, risk evaluation, and tracking remediation efforts.

• Contribute to the development of security standards, policies, and initiatives aimed at empowering developers.

• Participate in an on-call rotation for Wiz alerts (compensated at an additional rate).

⛳️ Requirements

• Extensive experience in frontend and backend software engineering.

• Advanced knowledge of Git and contemporary version control practices.

• Practical experience in application security within modern engineering settings.

• Proficient in conducting both manual and automated secure code evaluations.

• Strong grasp of CI/CD pipelines and principles of DevSecOps.

• Hands-on experience with Kubernetes security and containerized environments.

• Robust knowledge of AWS cloud security.

• Familiarity with OWASP Top 10, secure coding techniques, and vulnerability remediation strategies.

• Capable of effective communication with developers and engineering leadership.

• A collaborative and practical mindset towards security.

🏝️ Benefits

• Flexible work organization.

• Friendly and informal working atmosphere.

• Opportunity to collaborate with an international team possessing high technical and scientific expertise.