Cloud Platform Security Engineer

Doctolib; Levallois-Perret; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Free comprehensive health insurance

Vacation days (25 + RTT)

Lunch vouchers

Relocation support

Hybrid work arrangement

Job summary

Doctolib is seeking a Platform Security Engineer to join the Security team in Levallois-Perret, France. You will protect cloud infrastructure and the application ecosystem while enabling rapid, secure innovation across Doctolib’s healthcare platform.

You’ll own security workstreams end to end, implement Terraform-based changes, tighten IAM and secrets management, and participate in incident response using Elastic SIEM. Hybrid work up to 2 remote days per week.

Qualifications

• Hands-on security engineering experience in production environments.
• Proficiency with infrastructure as code and GitHub workflows.
• Experience with cloud platforms (AWS/GCP/Azure) and container orchestration.
• Strong written communication and collaboration across teams.

Responsibilities

• Own platform security workstreams end to end from design to enforcement.
• Code-driven changes using Terraform with peer review and reversibility.
• Harden cloud and infrastructure baselines including IAM, secrets, and network guardrails.
• Lead incident investigations and improve detection rules with Elastic SIEM.
• Document technical notes and drive adoption with engineering teams.

Skills

Security engineering

Infrastructure as code

Incident response

Threat hunting

CI/CD security

English fluent

Tools

Terraform

Kubernetes

Elastic SIEM

AWS

GCP

Azure

Job description

Doctolib is seeking a Platform Security Engineer to join the Security team in Levallois-Perret, France. You will protect cloud infrastructure and the application ecosystem while enabling rapid, secure innovation across Doctolib’s healthcare platform.

You’ll own security workstreams end to end, implement Terraform-based changes, tighten IAM and secrets management, and participate in incident response using Elastic SIEM. Hybrid work up to 2 remote days per week.