Product Security Engineer: Secure-by-Design for AI Products

Mistral.ai; Paris; Sur place; EUR 90 000 - 150 000; Plein temps

Résumé du poste

Mistral.ai is seeking a Product Security Engineer to partner with product teams across the lifecycle—from design to production—to ensure security is embedded in every step of our AI platform. You will drive threat modeling, security reviews and risk assessments, and define pragmatic, secure-by-default patterns that enable engineering teams to ship safely and rapidly.

You will work with engineers, researchers and product managers to balance security, product velocity and developer experience,

Qualifications

• 5+ years in Product Security, Application Security or security-focused software roles.
• Strong experience with threat modeling and architecture reviews.
• Deep understanding of modern software security: authentication, authorization, cryptography, data flows.
• Ability to review production code and build security automation.

Responsabilités

• Serve as the dedicated Product Security partner for one or more product organizations.
• Drive security throughout the entire product lifecycle, from design and architecture reviews to production deployment.
• Lead threat modeling, security architecture reviews and risk assessments for new features, APIs and major architectural changes.
• Define pragmatic security requirements and secure-by-default patterns for high-velocity product delivery.
• Review critical designs and code focusing on authentication, authorization, tenant isolation and data protection.
• Design product-specific security validation strategies, including targeted testing and guided agent-based assessments.
• Partner with engineering teams to remediate vulnerabilities identified through code reviews and testing.
• Collaborate with Security Engineering to improve reusable security platforms and guardrails.
• Champion secure software engineering through coaching and secure-by-design patterns.
• Define Product Security metrics and help shape practices across the company.

Connaissances

Python

Go

TypeScript

Security automation

Description du poste

Mistral.ai is seeking a Product Security Engineer to partner with product teams across the lifecycle—from design to production—to ensure security is embedded in every step of our AI platform. You will drive threat modeling, security reviews and risk assessments, and define pragmatic, secure-by-default patterns that enable engineering teams to ship safely and rapidly.

You will work with engineers, researchers and product managers to balance security, product velocity and developer experience,