Security Platform Engineer

Role Overview

• Architect Security-as-a-Service: Build high-level security abstractions to provide a seamless experience for our engineering teams.
• Automate Guardrails: Identify and automate security checks within CI/CD pipelines and cloud infrastructure to eliminate manual toil.
• Empower through Visibility: Manage security dashboards and automated remediation tools using DefectDojo and Backstage.
• Defend the Infrastructure: Optimize security rules for edge components (WAF, Shield, Firewalls, IDS/IPS).
• Drive Detection Engineering: Design automated correlation and detection standards across logs in collaboration with the Architecture Guild.
• Own the Lifecycle: Manage the automated vulnerability lifecycle from identification to remediation using Dependency-Track.

Requirements

• 5 to 10 years in DevSecOps or Security Engineering.
• Deep expertise in AWS and Kubernetes/Docker.
• Strong fundamentals in backend engineering (Python or Rust preferred).
• Hands-on experience with ASPM tools (DefectDojo, Dependency-Track) and integrating SAST/DAST into GitHub Actions or GitLab CI.
• Fluency in English and French is required.
• If you’ve worked with Backstage, hold an OSCP or AWS Certified Security credential, or have a background in Pentesting, we definitely want to hear from you!

Tech Stack

• AWS
• Cloud
• Docker
• Firewalls
• Kubernetes
• Python
• Rust

Benefits

• A neat integration to start well
• Lots of possibilities for development
• Collaboration with multidisciplinary and international teams
• International projects to perfect your background!
• An attractive salary
• An access to our E-Learning platform 📚 : for the development of languages and other skills
• No-meetings days to boost your efficiency!