Platform Security Engineer — AI Infra & DevSecOps

Mistral; Paris; In loco; EUR 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

Mistral is seeking a Platform Security Engineer to architect and maintain the security of its AI infrastructure and application lifecycle. You will embed robust controls into CI/CD pipelines, cloud environments, and runtime systems to protect velocity without friction.

You will partner with research and engineering teams to integrate security from code to cloud, automate guardrails, and promote secure defaults across the stack.

Competenze

• Five or more years of experience in Platform Security, Security Engineering, or Cloud Security.
• Deep understanding of container orchestration and container security, plus strong IaC security experience.
• Strong Python or Go skills to build security automation and integrate diverse security tools.
• Extensive experience deploying modern security tooling with a pragmatic vulnerability management approach.
• Excellent communication and ability to partner with developers and researchers to embed secure defaults.

Mansioni

• Drive threat modeling and risk prioritization in system-design reviews for core infrastructure and new products.
• Own end-to-end vulnerability management across CI/CD pipelines and runtime environments.
• Secure container orchestration deployments and hardened workloads across distributed systems.
• Define and enforce Infrastructure-as-Code security with policy-as-code in deployment pipelines.
• Design and execute a security tooling strategy for cloud-native apps, CSPM, SAST/DAST, and secrets management.
• Champion developer enablement with secure defaults and remediation workflows.
• Build security automation to scale with hyper-growth and minimize manual overhead.

Conoscenze

Platform security

Container security

Python

Go

Threat modeling

Vulnerability management

Developer collaboration

Descrizione del lavoro

Mistral is seeking a Platform Security Engineer to architect and maintain the security of its AI infrastructure and application lifecycle. You will embed robust controls into CI/CD pipelines, cloud environments, and runtime systems to protect velocity without friction.

You will partner with research and engineering teams to integrate security from code to cloud, automate guardrails, and promote secure defaults across the stack.