DevSecOps Engineer – Secure AI Infra & Kubernetes

Mistral; Paris; Hybride; EUR 85 000 - 120 000; Plein temps

Avantages offerts par ce poste

Health insurance

Transportation allowance

Sport allowance

Meal vouchers

Private pension plan

Generous parental leave policy

Résumé du poste

Mistral AI is seeking a DevSecOps Engineer to architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. You will embed robust security controls into our CI/CD pipelines, infrastructure environments, and developer workflows, without compromising deployment velocity.

Location: Paris HQ with a hybrid policy encouraging on-site collaboration; the role offers competitive salary, equity, health insurance, transport and meal allowances, pension, and

Qualifications

• 5+ years of experience in DevSecOps, Security Engineering, or Cloud Security.
• Deep understanding of Kubernetes and container security.
• Strong programming/scripting skills (Python or Go).
• Experience securing Infrastructure-as-Code (Terraform) across major cloud providers.
• Experience with vulnerability management and threat modeling.
• Excellent communication and collaboration with developers and researchers.
• Ability to embed secure defaults without slowing delivery.

Responsabilités

• Drive threat modeling and risk prioritization exercises, serving as the security counterpart to system-design reviews for our core infrastructure and new products.
• Own end-to-end vulnerability management across CI/CD pipelines and runtime environments, covering both underlying infrastructure and applications.
• Secure our Kubernetes deployments and containerized workloads, implementing advanced pod and node hardening to prevent lateral movement across distributed systems.
• Define and enforce Infrastructure-as-Code security by building robust Terraform guardrails and integrating policy-as-code directly into deployment pipelines.
• Design and execute a comprehensive security tooling strategy, managing solutions for CNAPP, CSPM, SAST, SCA, secrets management, and SBOM-CVE tracking.
• Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.
• Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture from the ground up.

Connaissances

Kubernetes security

Terraform IaC

Python/Go scripting

Threat modeling

Vulnerability management

CI/CD security

Developer collaboration

Outils

Terraform

CNAPP

CSPM

SAST

SCA

SBOM-CVE tracking

Description du poste

Mistral AI is seeking a DevSecOps Engineer to architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. You will embed robust security controls into our CI/CD pipelines, infrastructure environments, and developer workflows, without compromising deployment velocity.

Location: Paris HQ with a hybrid policy encouraging on-site collaboration; the role offers competitive salary, equity, health insurance, transport and meal allowances, pension, and