Offensive Security Engineer - Automation & Threat Hunting

Veepee; Paris; Hybride; EUR 60 000 - 105 000; Plein temps

Avantages offerts par ce poste

Health insurance

Flexible office with up to 2 days at‑h

Learning platform

Résumé du poste

Veepee, a pioneer of online flash sales, seeks a security professional to join its in‑house threat detection and incident response team in a hybrid setup. You will lead offensive engagements, simulate AD attack paths, and translate findings into automated detections and remediation plans.

With 3–5 years in offensive security or mixed red/blue roles, you will work across web/API assessments and risk scenarios, collaborating closely with product and infrastructure teams.

Qualifications

• 3–5 years in offensive security, detection engineering or a mixed red/blue role.
• Proficiency in French and professional English.
• Solid offensive skills: web and API penetration testing (OWASP), Active Directory attack techniques, and business-logic abuse beyond the technical stack.
• Scripting and automation (Python, Bash, PowerShell); interest in AI-assisted security tooling is a strong plus.

Responsabilités

• Attack Veepee's perimeter like a real adversary: red team, pen tests, phishing campaigns and business web flows.
• Qualify risks and emerging threats with working attack scenarios.
• Convert attack paths into detection rules, hunting queries, or automated controls.
• Automate tools and processes; build AI-assisted security tooling where applicable.
• Remediate findings and communicate impact to product and infra teams.

Connaissances

Offensive security

Penetration testing (web/API)

Active Directory attacks

Threat hunting

Automation scripting

Python

Communication

French & English fluency

Outils

OWASP

Description du poste

Veepee, a pioneer of online flash sales, seeks a security professional to join its in‑house threat detection and incident response team in a hybrid setup. You will lead offensive engagements, simulate AD attack paths, and translate findings into automated detections and remediation plans.

With 3–5 years in offensive security or mixed red/blue roles, you will work across web/API assessments and risk scenarios, collaborating closely with product and infrastructure teams.