Appsec/DevSecOps – IDF – N4

Keoni; Paris; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Keoni is seeking a technical expert in AppSec/DevSecOps to strengthen our API security and secure development practices across Europe. The role focuses on identifying cybersecurity risks and implementing tailored security solutions within the company context.

The candidate will work with SAST, DAST, SCA, and RASP tools, conducting code audits and guiding developers to reduce production vulnerabilities while maintaining security tooling.

Qualifications

• Security expertise across software development lifecycle.
• Ability to advise and train developers on secure coding practices.

Responsibilities

• Assist, advise, and train developers on secure development practices to limit vulnerabilities in production code.
• Participate in vulnerability monitoring and maintenance of existing tools and audit code produced by developers.
• Raise awareness and train developers on secure development practices and secure coding standards.
• Monitor tools and third‑party libraries for vulnerabilities and coordinate remediation with developers.
• Conduct code audits manually and with tools (SAST/DAST/SCA/RASP).
• Maintain and improve existing security tooling and vulnerability aggregators.

Skills

API Security

Application Security

Vulnerability Analysis & Management

SAST & DAST, SCA

Job description

# Appsec/DevSecOps – IDF – N4* Appsec/DevSecOps – IDF – N4MISSIONS As part of the activities of the application security team, we wish to strengthen our expertise in application security (AppSec), DevSecOps, and API security. We are looking for a technical expert to help us identify and assess cybersecurity risks, as well as implement security solutions tailored to our needs and the company's context.Technical Skills: API Security – Expert – Essential; Application Security – Expert – Essential; Vulnerability Analysis and Management – Proficient – Essential; SAST & DAST, SCA – Proficient – ImportantJob Description: Assist, advise, and train developers on secure development practices to limit the risk of introducing vulnerabilities into production code. Participate in vulnerability monitoring and maintenance of existing tools, and audit code produced by developers. Assist, raise awareness, train, and advise developers on secure development practices. Participate in vulnerability monitoring of tools, third-party libraries, etc., implemented by developers. Assist developers in vulnerability remediation efforts. Conduct code audits, manually and/or using tools. Participate in the maintenance of existing tools. Uses include SAST, SCA, RASP, DAST, and vulnerability aggregators.Professional English Language Skills (Essential) **Work location:** Europe