Platform Security Engineer

Jobgether; France; Remote; EUR 50,000 - 67,000; Full time

Benefits offered by this job

Remote-first across Europe

MacBook provided

€1,000 FlexBudget for professional dev

Job summary

Jobgether is seeking a senior Platform Security Engineer based in France. You will join a fully remote European team to strengthen cloud security, platform reliability, and secure engineering practices in a modern infrastructure.

You will design secure workflows protecting data and ensuring auditable access across multiple countries. In this individual contributor role, you will work on cloud infrastructure, Kubernetes, CI/CD security, identity management, observability, and disaster recovery,

Qualifications

• Ownership of security in production cloud environments.
• Strong cloud security fundamentals: IAM, SSO/OIDC, secrets management.
• Experience with Kubernetes in production and workload security.
• Experience integrating security checks into CI/CD pipelines.
• Product-oriented platform engineering with DevEx focus.

Responsibilities

• Design secure‑by‑default workflows for production operations.
• Strengthen cloud security practices including IAM, SSO/OIDC, secrets management, least privilege.

Skills

Cloud security

IAM & SSO/OIDC

Kubernetes

CI/CD security

Security automation

Observability

Disaster recovery

Threat modeling

Education

Bachelor's degree in a relevant field

Tools

GitOps

CI/CD pipelines

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Platform Security Engineer based in France.

We are looking for a senior Platform Security Engineer to strengthen cloud security, platform reliability, and secure engineering practices in a fully remote European environment.

In this individual contributor role, you will join a platform engineering team focused on building reliable infrastructure and improving the developer experience.

You will design and implement secure-by-default workflows that protect sensitive personal and compensation data across multiple countries.

Your work will span cloud infrastructure, Kubernetes, CI/CD security, identity management, observability, and disaster recovery.

You will collaborate closely with engineers to embed security into everyday workflows without compromising delivery speed or usability.

By combining hands‑on engineering, automation, and pragmatic risk management, you will help build a resilient platform where security becomes the easiest path.

This is an opportunity to shape platform security strategy while delivering measurable improvements in a collaborative, remote‑first team.

Accountabilities

• Design and implement secure‑by-default workflows for production operations, ensuring access is controlled, auditable, and straightforward for engineers to use.
• Strengthen cloud security practices, including identity and access management, SSO/OIDC, secrets management, and least‑privilege access controls.
• Secure and operate production Kubernetes environments, implementing appropriate workload security and access restrictions.
• Integrate security checks and automated scanning into CI/CD pipelines to identify and resolve vulnerabilities early in the delivery process.
• Improve infrastructure‑as‑code practices, developer tooling, and self‑service guardrails to make secure engineering workflows easy to adopt.
• Manage cloud networking and edge protection, including VPC boundaries, DNS, TLS, load balancing, CDN, and Web Application Firewall (WAF) configuration.
• Define and improve security priorities, response targets, incident workflows, threat modeling, and post‑incident reviews.
• Strengthen platform reliability through service‑level objectives (SLOs), observability, on‑call practices, and incident troubleshooting.
• Design, implement, and regularly test backup, restoration, and disaster recovery procedures to support business continuity.
• Lead resilience exercises and refine recovery playbooks to ensure recovery objectives are clear and achievable.
• Use AI‑powered engineering tools and automation, including agents and Model Context Protocol (MCP) integrations, to accelerate engineering work and improve platform operations.
• Collaborate with platform engineers and engineering leadership to balance risk, delivery speed, developer experience, and operational stability.
• Document technical decisions, communicate trade‑offs clearly, and use feedback and adoption metrics to continuously improve platform security.

Requirements

• Demonstrated ownership of application or platform security in a production cloud environment, with clear examples of impact.
• Strong cloud security fundamentals, including IAM, SSO/OIDC, secrets management, identity integrations, and least‑privilege access.
• Solid platform engineering experience across infrastructure as code, CI/CD pipelines, security automation, and observability.
• Proven experience operating Kubernetes in production, including workload security and access controls.
• Practical knowledge of cloud networking and edge technologies, including VPCs, DNS, TLS, load balancing, CDNs, and WAFs.
• Experience with reliability engineering practices such as SLOs, on‑call operations, threat modeling, incident coordination, and postmortems.
• Hands‑on experience designing and testing backup, restore, and disaster recovery procedures.
• A product‑oriented approach to platform engineering, with attention to developer experience, adoption, usability, and measurable outcomes.
• Ability to write and review code to diagnose and resolve problems directly rather than simply identify or report them.
• Experience using AI tools to accelerate engineering tasks and integrate AI‑assisted capabilities into platform workflows.
• Fluent English, with the ability to communicate technical decisions, document trade‑offs, and collaborate effectively in a remote‑first environment.

Nice To Have

• Experience with ISO 27001, SOC 2, or DORA compliance requirements.
• Background in fintech, payroll, or other environments handling regulated or sensitive data.
• Knowledge of detection engineering, security information and event management (SIEM), or related security monitoring practices.
• Experience with PostgreSQL operations and safe database schema migrations.
• Familiarity with Elixir or the ability to learn and work with functional programming languages.
• Awareness of cloud cost optimization and FinOps practices.
• Relevant certifications, although practical experience and demonstrated outcomes are prioritized.

Benefits

• Competitive compensation: Annual gross base salary of €50,000–€67,000, depending on experience and location.
• Equity participation: Stock options through an equity incentive plan, with no bonus or commission component.
• Fully remote work: Remote‑first working arrangements across Europe, with interviews generally scheduled between 10:00 and 16:00 CET.
• Workstation and onboarding: A MacBook and a €500 onboarding budget to support your setup during your first months.
• Professional development: A €1,000 annual FlexBudget for professional development and remote‑work enablement.
• Health insurance: Health insurance plans, with options to add family members and adjust coverage depending on the country.
• Paid time off: 25 days of paid vacation annually, plus three additional caring days for side projects supporting positive social causes.
• Family‑friendly policies: Two additional paid weeks on top of the legal maximum parental leave, plus your birthday and your children's birthdays off.
• Team connection: In‑person team gatherings at least once a year.
• Inclusive culture: A workplace that values diversity, individuality, non‑linear career paths, and evidence‑based assessment.
• Permanent employment: A permanent contract and the opportunity to influence platform security, infrastructure, and developer experience.

How Jobgether Works

We use an AI‑powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top‑fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre‑contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.