Platform and Product Security Officer (F/H)

Mirakl - Labs; Paris, Bordeaux; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

A leading eCommerce solutions provider is seeking a Senior Platform and Product Security Officer to enhance their cybersecurity team. This role includes building the product security team, supporting engineering with cloud security, and performing security testing. Candidates should possess strong audit techniques, familiarity with development environments, and fluency in both English and French. This role offers the chance to grow within an innovative environment that values security and teamwork.

Qualifications

• Strong command of white-box audit techniques.
• Experience in a DevSecOps environment is a plus.
• Proficient in Java and Python are advantageous.

Responsabilités

• Contribute to building the Product Security team.
• Support engineering teams on product and cloud security topics.
• Perform security testing (penetration testing) as needed.

Connaissances

white-box audit techniques

code analysis tools (Semgrep, GHAS)

web proxy tools (Burp, Caido, etc.)

Infrastructure as Code

AWS

GCP

Jira

Fluent in English

Fluent in French

Outils

Java

Python

GitHub

Description du poste

Platform and Product Security Officer (F/H)

Paris, France

About Mirakl

Mirakl is the leading provider of eCommerce software solutions. Mirakl’s suite of solutions provides enterprises with a transformative way to drive significant growth and efficiency in their online business. Since 2012, Mirakl has been pioneering the platform economy, empowering retail and B2B enterprises with the most advanced, secure and scalable technology to digitize and expand product assortment through marketplace and dropship, improve efficiency in supplier catalog management and payments, personalize shopping experiences, and boost profits through retail media.

Mirakl is trusted by 400+ industry‑leading businesses worldwide including Macy’s, Decathlon, Best Buy, Airbus, Toyota Material Handling and Sonepar.

Headquartered in Paris with another office in Bordeaux and offices in 7 countries, Mirakl is recognized as a Great Place to Work company.

With more than 350 people, Mirakl Labs teams are mainly based in France. They work together on a daily basis to develop our roadmap for our 5 SaaS solutions. They also address the issues faced by our customers and users, responding to various challenges related to new features, scalability, security, and usability.

About the role

As a Senior Platform and Product Security Officer, you will join the Cybersecurity team, reporting directly to the Head of Product Security. Your role will be to act as the technical right‑hand on product security topics. You will work on a broad range of subjects, in constant collaboration with Development, SRE, and Architecture teams, from hands‑on security testing to awareness initiatives through practical workshops.

Your responsibilities

• Contribute to building the Product Security team, partnering closely with the Head of Product Security.
• Support engineering teams on product and cloud security topics, from design to production.
• Contribute to product security governance, continuously improving practices and architectures.
• Perform security testing (penetration testing) in development environments (as needed).
• Act as a cross‑functional point of contact for security topics related to the platform.

Environment and collaboration

• You will be part of the Security team in an agile, structured organization.
• You will work closely with:
• Product Development
• SRE (Site Reliability Engineering)
• Software Architecture
• Strong collaboration culture with daily interactions across tech teams.

Profile we are looking for

Technical skills

Must‑have:

• Strong command of white‑box audit techniques, code analysis tools (Semgrep, GHAS), web proxy tools (Burp, Caido, etc.), Infrastructure as Code, AWS, GCP, and Jira.
• Fluent in English and French (written and spoken).

Nice‑to‑have:

• Experience in a DevSecOps environment.
• Knowledge of GitHub (security, CI/CD).
• Proficiency in Java and Python.
• Experience leading and delivering security audits.
• You are curious, rigorous, and proactive.
• You have proven ability to learn and upskill on a wide range of technologies.
• You enjoy teamwork in a demanding technical environment.
• You have an analytical mindset and can clearly explain security issues to non‑specialists.
• Prior experience in penetration testing or product security is required.

Growth and career paths

This role will help you build a comprehensive view of product security at Mirakl, with concrete career opportunities towards:

• Internal Red Team roles (depending on your interests),
• Blue Team, security governance, or product architecture tracks.
• A fast‑growing company, global leader in its sector.
• A security team in the middle of structuring, with high‑impact projects.
• A strong security culture with engaged leadership.
• Modern technologies and a stimulating multi‑cloud environment.
• A cross‑functional, strategic, and visible role.

Recruitment process

• First interview call: 30–45 minutes with a Talent Acquisition Specialist.
• Technical & manager interview: 1 hour with Maxime (Senior Product Security Officer).
• Values interviews: Two 45‑minute STAR‑based interviews.

We welcome collaborators with their diverse perspectives and experiences to power us forward. These often far exceed conventional job requirements and help us create a culture of continuous learning. If you’re ready to join a global leader powering digital transformation for 450+ of the world’s most innovative retailers and B2B organizations, we strongly encourage you to apply to any of our roles, even if you think you’re not an exact match. We may use Artificial Intelligence (AI) solutions to help streamline our hiring process, including screening applications, analyzing resumes, and assessing responses. While AI helps us work efficiently, all final hiring decisions are made by humans. For more information, visit our AI Guidelines for Candidates and Interviews.

Mirakl handles personal data during your recruitment processes. Mirakl is the controller of the personal data, meaning it decides how and why the data is processed. Mirakl takes strong commitment to protecting applicant data and ensuring compliance with privacy regulations during the recruitment process, in particular:

• Types of Data Processed: Mirakl collects data such as name, contact details, educational and employment history, and other relevant information provided during the application process.
• Purpose of Data Use: The data is used to manage and process applications, communicate with candidates and, upon successful application, to onboard the individual.
• Data Access and Sharing: Access to personal data is generally restricted within Mirakl and its affiliates, though some third‑party providers might have access to carry out specific functions like reference checks and payroll processing.
• Data Retention: Personal data is retained only as long as necessary for the recruitment process or to comply with legal obligations, typically up to two years from the last contact.
• Rights of Individuals: Candidates have rights regarding their data, including access, data portability, correction, restriction of processing, and in certain cases, deletion. In addition, they may lodge a complaint with an EU supervisory authority.
• Queries and complaints: If you have any questions or wish to exercise your rights, you may fill in this form or directly contact us by sending an email to [e-mail].

A full version of Mirakl’s Privacy Policy is accessible, here.