Product Security Engineer: Threat Modeling & BugBounty

Youtrust; Paris; Hybride; EUR 53 000 - 79 000; Plein temps

Avantages offerts par ce poste

Stock options

Meal vouchers

Insurance

Wellbeing programs

Transport reimbursement

Discounts and perks

Time off & development budget

Résumé du poste

Youtrust, a European Digital Trust provider, seeks a Security Engineer to own the security review lifecycle across products. You will manage the BugBounty program, drive remediation of vulnerabilities, and support regulatory compliance initiatives such as eIDAS, NIS2, and ISO 27001, collaborating with Engineering, Product, and Compliance teams.

The role emphasizes pragmatic security, threat modeling, and cross‑functional impact, with hybrid work in Paris and a focus on secure, trusted digital

Qualifications

• Deep hands-on expertise in web application and API security.

Responsabilités

• Lead end-to-end security review cycle for product features.
• Own and operate BugBounty program: triage, remediation, rewards.
• Identify, prioritise and track remediation of vulnerabilities across product and infra perimeter.
• Support regulatory compliance (eIDAS, NIS2, ISO 27001) with technical controls.
• Extend security expertise beyond Product to all company initiatives.
• Participate in on-call rotation and build automation to reduce manual toil.
• Share knowledge and coach teams on secure-by-design practices.

Connaissances

Threat modelling

BugBounty

Vulnerability management

AI in security

Product security

Regulatory compliance

Security awareness

Description du poste

Youtrust, a European Digital Trust provider, seeks a Security Engineer to own the security review lifecycle across products. You will manage the BugBounty program, drive remediation of vulnerabilities, and support regulatory compliance initiatives such as eIDAS, NIS2, and ISO 27001, collaborating with Engineering, Product, and Compliance teams.

The role emphasizes pragmatic security, threat modeling, and cross‑functional impact, with hybrid work in Paris and a focus on secure, trusted digital