Senior DevSecOps Engineer

This is a fully remote position, open to applicants in France.

📋 Description

• Ensure that 360Learning's infrastructure is inherently secure, easily detectable by default, and verifiable during audits.

• Connect security and platform engineering by resolving infrastructure security concerns and assisting security operations.

• Outline the Azure and AKS environment, including detection and logging coverage, as well as ISO 27001 and SOC 2 control scope.

• Manage infrastructure-related alerts from start to finish.

• Deliver hardening and automation enhancements in a production setting.

• Oversee infrastructure vulnerability management, from triage to follow-up on remediation.

• Deploy and manage a honeypot that generates high-fidelity alerts.

• Broaden SIEM connector coverage and document log sources along with their retention policies.

• Conduct infrastructure vulnerability remediation on a predictable schedule with SLA reporting.

• Handle detection content as code, ensuring rules are reviewed, tested, and accompanied by documented runbooks.

• Automate the gathering of audit evidence for infrastructure scope.

• Remove long-lived credentials from critical pathways and promote secure defaults.

• Collaborate daily with the CISO, Security Engineer, DevOps, platform engineering, and IT teams.

• Engage in alert triage and conduct security assessments for customers.

• Take ownership of approximately half of the greenfield build work from start to finish.

⛳️ Requirements

• Over 5 years of experience in infrastructure, cloud, or platform engineering with a strong emphasis on security, or in security engineering with practical infrastructure experience.

• Practical experience with Kubernetes, including RBAC, network policies, admission controllers, secrets management, workload identity, and runtime security.

• Strong cloud experience, preferably with Azure; significant experience with AWS or Google Cloud, along with a genuine interest in transitioning to Azure.

• Proficiency in infrastructure as code tools such as Terraform, GitOps workflows, and CI/CD pipelines.

• Skills in scripting and automation using Python or Go, as well as shell scripting.

• Comfortable with reading and writing code, and capable of submitting pull requests on repositories managed by other teams.

• Experience in log analysis and investigation, including cloud audit logs, query languages, and correlation across identity, network, and application sources.

• Fluent in English (US/UK) at a B2 level or equivalent (FR).

• A passion for the Convexity working environment.

• Familiarity with ISO 27001:2022 and SOC 2 Type II security and compliance frameworks.

🏝️ Benefits

• The compensation package includes a base salary, a performance-based component, and equity.

• Stipend for working from home.

• RTT (Reduction of Working Time).

• Lunch vouchers provided.

• Comprehensive medical insurance.

• Gym subscription included.

• One month of parental leave for the second parent.

• Flexible working hours.

• Full remote work options available anywhere in France.

• Six active Employee Resource Groups (ERGs) focusing on Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity.

• Corporate Social Responsibility initiatives and CSR Charter.

• A Convexity culture and an impact-oriented working framework.