DevSecOps Engineer

Groupe PVCP; Paris; Sur place; EUR 60 000 - 80 000; Plein temps

Résumé du poste

Groupe PVCP is seeking a Cloud Security Engineer based in Paris, Île-de-France. You will be responsible for implementing security controls within our cloud environments, ensuring compliance with CIS controls and NIST frameworks. The ideal candidate will handle security testing, risk assessment, and incident response.

This role requires hands-on expertise with Azure and/or GCP, as well as a strong commitment to improving our cloud security posture through proactive measures and collaboration with internal teams.

Qualifications

• Hands-on experience with Azure or GCP cloud environments.
• Knowledge of CIS controls and NIST frameworks.
• Experience with static and dynamic application security testing.

Responsabilités

• Implement security controls within cloud environments.
• Ensure compliance with industry standards.
• Identify and assess security risks in cloud infrastructure.

Connaissances

Cloud security controls implementation

Compliance with CIS controls and NIST frameworks

Static and dynamic application security testing (SAST/DAST)

Identity and Access Management (IAM)

Incident response

Outils

Azure

GCP

CI/CD pipelines

Description du poste

Cloud Security Engineering

• You’ll take a hands‑on approach to implementing security controls within our cloud environments (Azure and/or GCP).
• You will ensure our cloud configurations are compliant with industry standards like CIS controls and NIST frameworks.
• This includes configuring and managing Identity and Access Management (IAM), network security groups, and encryption strategies.

Application Security

• You will be directly involved in the code. This means performing static and dynamic application security testing (SAST/DAST) to identify vulnerabilities and working with development teams to remediate them. You’ll also be responsible for integrating security tools and automated checks directly into our CI/CD pipelines.

Threat Modeling & Risk Assessment

• Proactively identify and assess security risks in our applications and cloud infrastructure.
• You’ll participate in threat modeling exercises and help the team understand and mitigate potential threats before they become a problem.
• Incident Response: You will be a key part of the team that investigates and responds to security incidents, particularly those related to our applications and cloud services.

Project Management

• Projects and execution which are in the scope of the CISO department.

Internal Consultant

• Consultant on Cyber Security for Internal Teams (DIOSI).

Policies

• Creation and enforcement.

KPI

• CIS, NIST and ISO270001.