IT Security Engineer (x/f/m)

Pasqal; Palaiseau; On-site; EUR 70,000 - 120,000; Full time

Job summary

Pasqal is seeking a Senior IT Security Engineer to join its IT team in designing, operating, and improving security across workplace, identity, networks, SaaS, infrastructure, and cloud environments. You will work with the Information Security Manager to translate security requirements into pragmatic controls and secure configurations.

Your role emphasizes access controls, vulnerability management, incident response, and automation using Python, Terraform, and Ansible, supporting ISO/IEC 27001

Qualifications

• 5–7 years of hands-on experience in cybersecurity, IT security, or a closely related infrastructure engineering role.
• Strong foundations in IAM, endpoint security, system hardening, vulnerability management, security monitoring, audit logging, and incident response.
• Hands-on experience with identity technologies such as SSO, SAML, OIDC, SCIM, MFA, and RBAC.
• Solid understanding of application and DevSecOps security practices, including CI/CD security, vulnerability scanning, threat modeling, and software supply-chain security.
• Ability to translate risks and security requirements into pragmatic technical controls and propose secure alternatives without unnecessarily blocking operations or research.
• Ability to document controls, decisions, and technical activities so they remain measurable, traceable, and auditable.
• Active technology and cybersecurity watch, with the ability to assess emerging threats and solutions and turn relevant insights into continuous security improvements.

Responsibilities

• Strengthen identity, endpoint, network, and cloud security through access controls, hardening, segmentation, monitoring, and vulnerability management.
• Deploy and operate protection and detection capabilities such as EDR/XDR, SIEM, IDS/IPS, logging, and alerting, while managing security incidents and remediation.
• Automate and standardize security controls using Python/Bash, Terraform, Ansible, Infrastructure as Code, and DevSecOps practices across IT and CI/CD environments.
• Support ISO/IEC 27001 certification by maintaining auditable technical controls and evidence, contributing to audits, and collaborating with IT, Engineering, Legal, HR, Procurement, and other teams to embed security by design.

Skills

IAM

Endpoint security

System hardening

Vulnerability management

Security monitoring

Audit logging

Incident response

CI/CD security

Threat modeling

Software supply chain

DevSecOps

Python

Terraform

Ansible

Education

Bachelor's degree in Computer Science or related

Tools

Python

Bash

Terraform

Ansible

IaC

Job description

About Pasqal

PASQAL designs and develops Quantum Processing Units (QPUs) and associated software tools.

Our innovative technology enables us to address use cases that are currently beyond the reach of the most powerful supercomputers; these cases can concern industrial application challenges as well as fundamental science needs.

In addition to the exceptional computing power they provide, QPUs are highly energy efficient and will contribute to a significant reduction in the carbon footprint of the HPC industry.

Job Description

As a Senior IT Security Engineer, you will join PASQAL’s IT team to design, operate, and continuously improve security across workplace, identity, networks, SaaS, infrastructure, and cloud environments. Working closely with the Information Security Manager, you will turn security requirements and risks into pragmatic solutions that support business needs.

Your main responsibilities will be to:

• Strengthen identity, endpoint, network, and cloud security through access controls, hardening, segmentation, monitoring, and vulnerability management.
• Deploy and operate protection and detection capabilities such as EDR/XDR, SIEM, IDS/IPS, logging, and alerting, while managing security incidents and remediation.
• Automate and standardize security controls using Python/Bash, Terraform, Ansible, Infrastructure as Code, and DevSecOps practices across IT and CI/CD environments.
• Support ISO/IEC 27001 certification by maintaining auditable technical controls and evidence, contributing to audits, and collaborating with IT, Engineering, Legal, HR, Procurement, and other teams to embed security by design.

About You

• 5–7 years of hands‑on experience in cybersecurity, IT security, or a closely related infrastructure engineering role
• Strong foundations in IAM, endpoint security, system hardening, vulnerability management, security monitoring, audit logging, and incident response
• Hands‑on experience with identity technologies such as SSO, SAML, OIDC, SCIM, MFA, and RBAC
• Solid understanding of application and DevSecOps security practices, including CI/CD security, vulnerability scanning, threat modeling, and software supply‑chain security
• Ability to translate risks and security requirements into pragmatic technical controls and propose secure alternatives without unnecessarily blocking operations or research
• Ability to document controls, decisions, and technical activities so they remain measurable, traceable, and auditable
• Active technology and cybersecurity watch, with the ability to assess emerging threats and solutions and turn relevant insights into continuous security improvements
• Experience in working in controlled environments
• Affinity with AI tools is a bonus
• Fluency in professional English and ability to work effectively in an international and multicultural environment

Soft Skills

• Collaborative team player able to build strong relationships with technical, operational, and business stakeholders
• Clear communicator able to influence decisions and adapt messages to both technical and non‑technical audiences
• Strong sense of ownership and autonomy, with sound judgment on when to coordinate or eslcate decisions to the ISM and other relevant stakeholders
• Rigorous, pragmatic, and solution‑oriented approach

What We Offer

• Brand new offices in Massy
• Type of contract : CDI / Permanent
• A dynamic, close‑knit, international team.

Recruitment process

• Talent Acquisition screening (30 min)
• Hiring Manager screening (45 to 60 min)
• Team fit interview: Lead Devops Damien and System and network administrator Bruno screening (60 min)
• Offer

PASQAL is an equal opportunity employer. We are committed to creating a diverse and inclusive workplace, as inclusion and diversity are essential to achieving our mission. We encourage applications from all qualified candidates, regardless of gender, ethnicity, age, religion or sexual orientation.

Joining Pasqal will give you the opportunity to take an active part in the rapid development of a DeepTech scale-up at the forefront of the second quantum revolution.

You will be directly involved in one of the biggest challenges shaping the technological landscape of the 21st century. You will be working as part of a team of top‑level scientists and engineers, in direct competition with the world's biggest players.