Internal Security Engineer: ISMS & Cloud Defenses

Stoïk; Paris; Hybride; EUR 90 000 - 125 000; Plein temps

Résumé du poste

Stoïk is seeking a senior security professional to join as the second security hire, reporting into the CISO. The role blends security engineering with ISMS leadership, operating across cloud, identity, and governance.

You will read pull requests, automate your work, and engage with engineers in a bilingual, hybrid Paris environment. You will own threat modelling, risk framing, secure defaults, and guardrails, while maintaining ISO 27001 certification and leading security tooling and end‑to‑end

Qualifications

• 3–5 years in security engineering, cloud/platform security, product security, or hybrid technical + GRC roles.
• Solid foundations in cloud (AWS preferred), containers, CI/CD, identity and networking.
• Ability to discuss designs credibly with engineers and auditors.
• Hands-on IT: endpoint/MDM management and identity administration in SaaS platforms (Google Workspace / Entra).
• Fluent French and English, written and spoken; based in Paris with hybrid on-site work.

Responsabilités

• Act as security counterpart in design/architecture reviews; model threats, frame risks, and propose ship-ready safeguards.
• Own vulnerability/exposure management end-to-end across CI/CD, dependencies, containers, cloud workloads, and external attack surface.
• Own and tune security tooling: cloud security posture, SAST/SCA, secrets management, endpoint, identity; optimize toolset.
• Maintain ISMS and ISO 27001 certification with operations, audits, management reviews, and risk register updates.
• Harden identity, endpoint, and SaaS estate; contribute to access management, joiner-mover-leaver, and annual security reviews.
• Administer IT tools (MDM fleets, Google Workspace, Entra, Microsoft 365, CrowdStrike, Tailscale, Dashlane); drive automation for recurring issues.
• AI leverage: data collection, policy drafting, log triage, and code-review support; scale security through tooling.

Connaissances

Security engineering

Cloud security

Containers

CI/CD

Identity

Networking

Python/Go scripting

Fluent French & English

Outils

AWS

Terraform

CrowdStrike

FleetDM

Vanta

Description du poste

Stoïk is seeking a senior security professional to join as the second security hire, reporting into the CISO. The role blends security engineering with ISMS leadership, operating across cloud, identity, and governance.

You will read pull requests, automate your work, and engage with engineers in a bilingual, hybrid Paris environment. You will own threat modelling, risk framing, secure defaults, and guardrails, while maintaining ISO 27001 certification and leading security tooling and end‑to‑end