CyberSecurity, Platform Security Engineer

Mistral; Paris; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Mistral is seeking a Platform Security Engineer to architect and maintain the security posture of our rapidly scaling AI infrastructure and lifecycle. You will embed robust controls into CI/CD, cloud environments, and developer workflows to protect systems without slowing velocity.

You will shape security integration across the stack, from code to cloud, making secure practices automatic by default and transparent to researchers and engineers.

Qualifications

• Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast-scaling environment.
• Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure-as-Code across major cloud providers.
• Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows.

Responsabilités

• Drive threat modeling and risk prioritization exercises as the security counterpart in system-design reviews for core infrastructure and new products.
• Own end-to-end vulnerability management across CI/CD pipelines and runtime environments, covering infrastructure and applications.
• Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems.
• Define and enforce Infrastructure-as-Code security by building robust guardrails and integrating policy-as-code into deployment pipelines.
• Design and execute a comprehensive security tooling strategy, managing solutions for cloud-native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking.
• Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.
• Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture.

Connaissances

Python

Go

Threat modeling

Vulnerability management

Container security

Infrastructure-as-Code security

Description du poste

Mistral provides full‑stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high‑stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co‑creating customized AI systems that they can run on their terms.

We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low‑ego and team‑spirited.

As a Platform Security Engineer on the Security team, you will architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. Security is not a gate but an enabler, and you will embed robust controls into our continuous integration and deployment pipelines, infrastructure environments, and developer workflows to protect our systems without sacrificing velocity.

Your role exists to ensure that our research and engineering teams can move fast while staying secure. You will shape how security integrates with every layer of our stack, from code to cloud, making secure practices invisible to developers and automatic by default.

What You Will Do

• Drive threat modeling and risk prioritization exercises as the security counterpart in system‑design reviews for core infrastructure and new products.
• Own end‑to‑end vulnerability management across continuous integration and deployment pipelines and runtime environments, covering infrastructure and applications.
• Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems.
• Define and enforce Infrastructure‑as‑Code security by building robust guardrails and integrating policy‑as‑code directly into deployment pipelines.
• Design and execute a comprehensive security tooling strategy, managing solutions for cloud‑native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking.
• Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.
• Build foundational security automation to scale alongside hyper‑growth, minimizing manual overhead while establishing a pragmatic security culture.

What we’re looking for

• Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast‑scaling environment.
• Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure‑as‑Code across major cloud providers.
• Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows.
• Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling.
• Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction.

What we offer

We offer a comprehensive benefits package designed to support your well‑being, growth, and work‑life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location‑specific perks.

Privacy Policy

Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.