Security Engineer, DevSecOps & Secure Architecture

Jobtailor; Aix-en-Provence; À distance; EUR 75 000 - 105 000; Plein temps

Résumé du poste

Jobtailor is seeking an experienced Security Engineer to strengthen the security posture of products, data and infrastructure. You will design secure architectures in collaboration with engineering teams and secure hybrid environments with VMs, containers, and cloud-native services.

You will develop automated guardrails in CI/CD (SAST, SCA, secret scanning), perform threat modeling, risk assessments, and architecture reviews while balancing security with developer velocity and business needs.

Qualifications

• 5–7 years of experience in software engineering, security engineering, DevSecOps or equivalent technical security roles.
• Strong development experience in Python, Node.js, Java, Go, PHP or similar.
• Hands-on experience with modern CI/CD systems (GitHub Actions, GitLab, Jenkins).
• Solid understanding of cloud security principles (AWS, GCP, Azure).
• Secure coding skills, OWASP Top 10, and application security fundamentals.
• Experience with security tools (SAST, SCA, container/IaC scanning, runtime security tools, IAM, secret management).
• Pragmatic, engineering-minded: able to balance security with developer experience, velocity and real-world constraints.
• Excellent communication skills: able to translate complex security issues into practical guidance.

Responsabilités

• Strengthen the security posture of products, data and infrastructure.
• Develop automated security guardrails integrated into CI/CD pipelines (SAST, SCA, secret scanning).
• Design secure architectures for applications, APIs, data flows and integrations in partnership with engineering teams.
• Secure hybrid environments combining virtual machines, containerized workloads and cloud-native services.
• Proactively identify risks through continuous analysis, threat modeling, risk assessments and architecture reviews.
• Help engineering teams integrate security by design.
• Participate in on-call rotations and improve incident response workflows.
• Lead security improvement projects: automation, tool optimization, process enhancements and fostering a culture of security ownership.

Connaissances

Python

Node.js

Java

Go

PHP

CI/CD

Cloud security

OWASP Top 10

Security tooling

Threat modeling

Outils

GitHub Actions

GitLab

Jenkins

SAST

SCA

Container security

IaC scanning

IAM

Secret management

Description du poste

Jobtailor is seeking an experienced Security Engineer to strengthen the security posture of products, data and infrastructure. You will design secure architectures in collaboration with engineering teams and secure hybrid environments with VMs, containers, and cloud-native services.

You will develop automated guardrails in CI/CD (SAST, SCA, secret scanning), perform threat modeling, risk assessments, and architecture reviews while balancing security with developer velocity and business needs.