Senior Security Engineer

This is a fully remote position, open to applicants in France.

📋 Description

• Participate in architecture, design, and implementation evaluations for new features, services, platform modifications, and cloud projects.

• Facilitate practical threat modeling and secure-by-design methodologies across APIs, services, data flows, workloads, and platform elements.

• Provide guidance to engineering teams on application security, cloud and infrastructure security, and secure software supply chain matters.

• Assist teams in making informed security trade-offs and support remediation efforts on complex or high-priority issues.

• Contribute to the security of AI-related product functionalities, addressing model, pipeline, data flow, and integration considerations.

• Evaluate technical security risks associated with internal AI usage, including data exposure, acceptable use, and vendor-related concerns, in collaboration with the GRC function as applicable.

• Discover practical ways to incorporate AI into security workflows, such as threat analysis, remediation assistance, security reviews, and automation for compliance.

• Bring significant technical depth to discussions on security and risk by identifying plausible attack vectors, assessing practical impacts and probabilities, and translating findings into actionable remediation priorities.

• Collaborate with the GRC function to ensure risk assessments benefit from robust technical insights and are linked to specific engineering actions.

• Articulate risks, trade-offs, and recommendations in a manner that prompts action across engineering and cross-functional teams.

• Simplify the adoption of secure practices through clear guidelines, repeatable patterns, automation, and practical support.

• Contribute to the enhancement and evolution of our security tools in close partnership with SecOps, focusing on making security signals, posture insights, and remediation workflows more beneficial for Security and Engineering teams.

• Create use cases, dashboards, workflows, and integrations that assist teams in better understanding, prioritizing, and addressing security challenges.

⛳️ Requirements

• You possess a robust technical security foundation with over 7 years of experience in application security, cloud and infrastructure security, and secure software supply chain.

• You have experience working in a SaaS or internet-scale product environment where security needed to advance at engineering pace.

• You are adept at collaborating closely with engineering teams: evaluating designs, questioning assumptions, supporting remediation, and transforming security requirements into practical enhancements.

• You take pleasure in delving into security tools and utilizing them to enhance visibility, prioritization, remediation, and engineering workflows.

• You offer hands-on security expertise to identify significant risks, assess practical impacts, and guide pragmatic remediation priorities.

• You are comfortable addressing urgent or high-impact security matters as needed, including incidents, emerging threats, complex remediations, and rapidly evolving cross-functional issues.

• Proficiency in both French and English (working language is English, with a remote-friendly policy that occasionally requires presence in Paris).

🏝️ Benefits

• Flex Life: We provide remote, hybrid, and in-office options, with each role specifying the level of flexibility. Our Paris office is situated next to the Opera Garnier. A €500 stipend will also be provided to help you establish your ideal workspace if working hybrid or remotely.

• For full remote employees, the SNCF discount card is covered to facilitate visits to the office and team.

• Comprehensive Health Benefits: We have partnered with Kenko to meet your healthcare needs.

• An annual allowance of €100 is provided for leisure activities of your choice in Sports or Culture.

• A €200 annual allowance is available if you commute to the office by bike to cover maintenance expenses.

• Professional Development: #Weaimhigh is part of our ethos, and we have invested in an internal Learning and Development platform while offering opportunities for additional training and support through your manager.

• Events & Team Building: #We care and we have fun! We organize an Annual Company Offsite, Events, Drinks, a Winter Party, Lunch & Learns, and much more as part of our culture.

• Parent Care: Gift and care packages are available for parents.

• PTO: Based on your country of residence (e.g., 25 days in France).