Secure-by-Design Product Security Lead

Marlink; France; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Marlink in France seeks a senior cybersecurity professional to guide and support project managers in embedding secure-by-design practices across the lifecycle of digital products and services.

You will translate regulatory requirements (CRA/NIS2) into actionable controls, support ISO27001 ISMS, and coordinate threat modeling, vulnerability management, and audit-ready documentation with cross-functional teams.

Qualifications

• 5–10 years of cybersecurity experience, ideally in regulated or product-focused environments.
• Strong knowledge of ISO27001/27002, ISO27005, and OWASP standards.
• Experience with risk assessment and threat modeling methods (EBIOS RM, STRIDE, TARA).
• Hands-on with vulnerability management and security testing (SAST/SCA/DAST).
• DevSecOps in CI/CD environments; secure-by-design mindset.
• Ability to secure web, cloud, networked, and embedded/IoT architectures.
• Additional experience in pentesting or security architecture is a plus.
• Fluent English with good writing/presentation skills.

Responsabilités

• Embed cybersecurity requirements from earliest project stages and ensure consistent application.
• Perform threat modeling and cyber risk assessments (EBIOS RM).
• Translate CRA/NIS2 into actionable security controls and deliverables.
• Support ISO27001 ISMS implementation and AnnexA alignment.
• Define and monitor vulnerability management in CI/CD pipelines (SAST, SCA, DAST).
• Review architectures to ensure effective controls and risk mitigation.
• Coordinate remediation actions with developers and stakeholders.
• Produce audit-ready documentation and compliance evidence.

Connaissances

5-10 years

ISO27001/27002

OWASP Top10

EBIOS RM

STRIDE

TARA

SAST

SCA

DAST

DevSecOps

Web/Cloud/Embedded

Penetration Testing

Outils

SAST Tools

SCA Tools

DAST Tools

CI/CD Security Tools

Description du poste

Marlink in France seeks a senior cybersecurity professional to guide and support project managers in embedding secure-by-design practices across the lifecycle of digital products and services.

You will translate regulatory requirements (CRA/NIS2) into actionable controls, support ISO27001 ISMS, and coordinate threat modeling, vulnerability management, and audit-ready documentation with cross-functional teams.