Senior Security Engineer

This is a fully remote position, open to applicants in France.

📋 Description

• Take the lead on daily security practices across all teams in collaboration with the Security Engineer.

• Comprehend products and evaluate risks at the earliest stages possible.

• Navigate security trade-offs within the scope of features and delivery schedules.

• Manage the resolution of vulnerabilities and findings from penetration testing.

• Equip teams with techniques, solutions, and processes that embody security-by-design.

• Identify, evaluate, and manage security incidents while learning from each experience.

• Implement security and compliance initiatives in a highly regulated setting.

• Work alongside Product and Engineering teams.

• Engage in team rituals and foster a writing-centric culture.

⛳️ Requirements

• Degree in engineering or an equivalent qualification.

• A minimum of 5 years of experience in a technical setting, with considerable expertise in security.

• Extensive experience in a SaaS environment.

• Demonstrable success in leading cross-functional projects from inception to completion with various teams.

• Professional command of both written and spoken English.

• Background in a highly regulated industry, especially healthcare, with experience in ISO 27001 or NIS2 being advantageous.

• Experience in facilitating security awareness or enablement programs is a plus.

• Familiarity with orchestrator- or harness-driven development tools, and the ability to create reusable skills or agents is a plus.

• Capability to evaluate the security of a product, project, or feature as early as possible.

• Skill in prioritizing vulnerabilities and penetration testing findings based on actual risk and steering their remediation.

• Ability to negotiate security trade-offs without hindering deliveries.

• Proficiency in designing adaptable security-by-design rules, techniques, and processes.

• Competence in detecting, assessing, and managing security incidents.

• Sound understanding of application and cloud security fundamentals.

• Partnership-oriented mindset, effective communication skills, initiative, versatility, diligence, and the ability to document or escalate issues.

🏝️ Benefits

• Remote-first organization.

• Engaging team rituals.

• Emphasis on a writing-driven culture.

• Individual contributor position without people management duties.

• Autonomy in decision-making within the security domain.

• Direct and measurable impact on the care of tens of thousands of patients.

• Broad responsibilities and foundational initiatives to build upon.