Hybrid App Security Engineer - Build Secure Guardrails

Rootedsec; Paris; Hybride; EUR 70 000 - 100 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

Spendesk in Paris, France is seeking an Application Security Engineer to work hybrid. You will review architecture proposals, review code before it ships, and maintain automated security scanning in the build pipeline.

The role focuses on turning recurring problems into checks or libraries to stop bugs from reaching production. You will collaborate with development teams and contribute to security tooling and guardrails.

Qualifications

• Reads and writes production code in at least one language.
• Knows the common vulnerability classes by mechanism, not by name.
• Has shipped a fix somebody else had to maintain.

Responsabilités

• Review code and designs for security implications.
• Own the scanning pipeline and keep its noise down.
• Turn recurring findings into guardrails to prevent repeats.

Connaissances

Code in production

Vulnerability knowledge by mechanism

Shipped fix experience

Outils

Threat modelling

Semgrep/CodeQL rules

Open source contributions

Description du poste

Spendesk in Paris, France is seeking an Application Security Engineer to work hybrid. You will review architecture proposals, review code before it ships, and maintain automated security scanning in the build pipeline.

The role focuses on turning recurring problems into checks or libraries to stop bugs from reaching production. You will collaborate with development teams and contribute to security tooling and guardrails.