Cybersecurity & AI Engineer Automation (F/H)

Mirakl - Labs; Paris; Sur place; EUR 70 000 - 95 000; Plein temps

Résumé du poste

Mirakl is hiring a Cybersecurity & AI Engineer Automation to join the Security team in Paris (or Bordeaux), CDI, with four days on-site per week. You will drive automation of GRC processes, support ISO 27001 and SOC 2, and shape AI security governance alongside Product and Engineering teams.

The role requires a Bac+5 in cybersecurity, 3+ years of experience, and hands-on scripting (Python, N8N). Fluency in French and English preferred. Join a global leader enabling AI-driven platforms.

Qualifications

• Master's degree (Bac+5) in cybersecurity or related field.
• Minimum 3 years of experience in cybersecurity.
• Participation in ISO 27001 audit as a security contributor.
• Experience in scripting and automation (Python, N8N or equivalent).
• Experience in a consulting firm or technology company is a plus.
• Strong understanding of compliance frameworks and security standards.

Responsabilités

• Maintain and evolve ISO 27001, SOC 2 certifications with automated GRC platforms.
• Automate evidence collection, control monitoring and documentation workflows using modern GRC tooling and scripting (Python, N8N).
• Co-design and evolve AI usage governance framework with acceptable use policies and data classifications.
• Monitor AI governance regulations and adapt Mirakl's framework accordingly.
• Embed security and compliance considerations across product and platform lifecycles.

Connaissances

Cybersecurity

Automation scripting

Python

N8N

ISO 27001

Formation

Master's degree (Bac+5)

Outils

Python

N8N

Drata

AWS

GCP

Description du poste

Cybersecurity & AI Engineer Automation (F/H)

Paris, France

About Mirakl:

Founded in 2012, Mirakl has been at the forefront of marketplace innovation, empowering every business to compete in the platform economy.
Today, Mirakl’s operating system combines an enterprise marketplace solution (Mirakl Platform) that enables retailers and B2B organizations to launch, scale, and operate marketplaces and dropship, AI-powered multichannel selling (Mirakl Connect), retail media (Mirakl Ads) and an agentic commerce infrastructure (Mirakl Nexus).
With dual headquarters in Boston and Paris, Mirakl helps a global ecosystem of 450+ marketplaces (B2C and B2B) and a network of over 100k third-party marketplace sellers. Brands like Macy’s, Decathlon, Carrefour, Asos, and Airbus Helicopters use Mirakl to grow their businesses in new and remarkable ways.

• Founded in 2012 | Member of French Tech Next40
• 750+ employees in 9 offices worldwide: Paris, Barcelona, Bordeaux, Boston, London, Munich, New York, Sydney, Tokyo
• 350+ Mirakl Tech teams members mainly based in France

Our Values:

Working at Mirakl means accelerating your career alongside ambitious, passionate, and supportive colleagues. We're proud of the diversity of backgrounds, perspectives, and experiences that make our teams unique.

Our 5 values guide how we collaborate:

• Work Hard Together: Teamwork and collaboration are the foundation of our success
• Get Things Done: We prioritize action and efficiency for impactful results
• Go Above & Beyond: We tackle challenges proactively and always aim for excellence
• Succeed Through Expertise: Knowledge sharing and continuous learning are core to our culture
• Satisfy & Empower Clients: We're committed to our clients' success

The Team You'll Join

You'll be part of our Security team within the Platform, Data & AI Security pillar, led by Maxime Lahaye, Senior Security Officer, based in Paris.

AI is fundamentally transforming how we work, and you'll join a team at the forefront of this evolution. This is your opportunity to build the GRC infrastructure of tomorrow, where automation, scripting, and security converge to enable Mirakl's next phase of growth.

This is a permanent position (CDI) based in Paris or Bordeaux, with 4 days on-site per week.

Your Impact

1 · Compliance & Certifications — Automation-first

• Contribute to maintaining Mirakl's ISO 27001, ISO 27018 and SOC 2 certifications, leveraging automated GRC platforms to enable continuous compliance monitoring
• Automate evidence collection, control monitoring and documentation workflows using modern GRC tooling, AI-powered agents and scripting (Python, N8N)
• Help manage and evolve the ISMS (Information Security Management System), ensuring it reflects both regulatory requirements and Mirakl's evolving AI-driven operations
• Co-design and evolve Mirakl's AI usage governance framework: acceptable use policies, data classification for AI inputs, shadow AI detection and AI vendor risk assessment
• Maintain a live inventory of AI tools used across the company and contribute to the risk-based process for evaluating and onboarding new tools
• Monitor the AI governance regulatory landscape and help adapt Mirakl's framework proactively

3 · Security by design across all company projects

• Partner with Product and Engineering teams early in project lifecycles to embed security and compliance requirements from the start
• Participate in risk reviews across product and platform initiatives, with specific attention to AI-related threat vectors (prompt injection, data leakage in LLMs, access control for models)

What You'll Bring to the Role

Experience:

• Master's degree (Bac+5)
• Minimum 3 years of experience in cybersecurity
• You participated in ISO 27001 audit as a security contributor at least
• Proven experience in scripting and automation (Python, N8N or equivalent)
• Experience in a consulting firm or technology company is a plus
• Strong understanding of compliance frameworks and security standards

Skills:

• Strong technical profile with hands-on experience developing scripts and automating processes
• Proactive and autonomous, with strong organizational and problem-solving abilities
• Excellent communication skills to engage both technical and non-technical stakeholders
• Integrity and ethics as core values
• Ability to work collaboratively in cross-functional teams
• Experience with web application and cloud (SaaS) security is a plus

Tools Used

• Python
• N8N
• Drata
• AWS, GCP
• Office Suite / Google Workspace

Languages

• Fluent in French and conversational English

Our Hiring Process

• 30-40 minute call with a Talent Acquisition Specialist
• 1-hour technical interview with the hiring manager
• Two 45-minute values interviews using the STAR methodology

The STAR method and structured interviews will hold no secrets for you.

We welcome collaborators with their diverse perspectives and experiences to power us forward. These often far exceed conventional job requirements and help us create a culture of continuous learning. If you’re ready to join a global leader powering digital transformation for 450+ of the world’s most innovative retailers and B2B organizations.

As part of our recruitment process, Mirakl processes your personal data to review and manage your application and, where appropriate, to consider your profile for future opportunities. You can exercise your data protection rights at any time, and as further detailed in our policies. For more information about how we process your personal data and your rights, please consult our Recruitment Privacy Notice, here in English and here in French.

We may use Artificial Intelligence (AI) solutions to help streamline our hiring process, including screening applications, analyzing resumes, and assessing responses. While AI helps us work efficiently, all final hiring decisions are made by humans. For more information, visit our AI Guidelines for Candidates and Interviews.

Mirakl handles personal data during your recruitment processes. Mirakl is the controller of the personal data, meaning it decides how and why the data is processed. Mirakl takes strong commitment to protecting applicant data and ensuring compliance with privacy regulations during the recruitment process, in particular:

• Types of Data Processed: Mirakl collects data such as name, contact details, educational and employment history, and other relevant information provided during the application process.
• Purpose of Data Use: The data is used to manage and process applications, communicate with candidates and, upon successful application, to onboard the individual.
• Data Access and Sharing: Access to personal data is generally restricted within Mirakl and its affiliates, though some third-party providers might have access to carry out specific functions like reference checks and payroll processing.
• Data Retention: Personal data is retained only as long as necessary for the recruitment process or to comply with legal obligations, typically up to two years from the last contact.
• Rights of Individuals: Candidates have rights regarding their data, including access, data portability, correction, restriction of processing, and in certain cases, deletion. In addition, they may lodge a complaint with an EU supervisory authority.
• Queries and complaints: If you have any questions or wish to exercise your rights, you may fill in this form or directly contact us by sending an email to [e-mail].

You can read our Recruitment Privacy Notice, here in English and here in French.