Security Engineer F/H

mym; Paris; Hybride; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Remote work 1 day/week

Health insurance

Training programs

Team events

Modern Paris offices

Résumé du poste

MYM seeks a Security Engineer to own MYM's end-to-end security posture, from threat detection to incident response. You will run offensive security operations, perform forensic analysis, and guide engineering teams on secure-by-design choices while growing the security function.

You will work closely with CTO and cross‑functional teams in a hybrid Paris-based setup, with a focus on protecting a high-scale, AWS‑driven platform.

Qualifications

• Hands-on cyber security experience with offensive and defensive disciplines.
• Experience with threat detection, incident response, and forensics.
• Strong knowledge of AWS security services and cloud security concepts.

Responsabilités

• Own and improve the SIEM and alerting to reduce noise and improve coverage.
• Lead threat detection and threat hunting to preempt incidents.
• Drive incident qualification and response across environments.
• Forensic analysis on AWS multi-account infrastructure.
• Run offensive security operations and Red Team exercises.
• Support engineering teams with secure-by-design practices.
• Develop and maintain security playbooks, runbooks, and standards.
• Contribute to growing the security team and hiring strategy.

Connaissances

Cybersecurity

Threat hunting

Incident response

AWS security

Red Team

Forensic investigation

Security architecture

Communication

Formation

Bachelor's degree in a relevant field

Outils

Sumo Logic

GuardDuty

Security Hub

OpenSearch

Description du poste

At MYM, we make no secret of it: we have the ambition to become the leading platform for exclusive content in France and internationally.

How? By enabling all Content Creators, through our platform, to guarantee the exclusivity, authenticity and originality of their creations to their users.

MYM's Superpowers?

• Power to the Creators I Content creators are paid directly by users, for their content, via a paid subscription they manage with complete autonomy
• Authenticity for the Users I By subscribing to their favorite creators, users gain access to exclusive content, shared nowhere else
• An Infinite Range of Possibilities I Photos, Videos, Stories, Lives, Chat… Users and Creators build, through MYM, an exclusive relationship immensely rich in content

What you will do

MYM runs on AWS, serves 19M users, and handles peak loads of 10,000 RPS; security is not a checkbox, it is a core pillar of everything we ship.

Reporting directly to Quentin, our CTO, you will own the security posture of MYM end-to-end: from threat detection to offensive testing, from incident response to building the security team. In this role, you will:

• Own and continuously improve the SIEM (Sumo Logic), tuning alerts, reducing noise, and ensuring meaningful coverage across all environments.
• Lead threat detection and threat hunting, proactively searching for signs of compromise before they become incidents.
• Drive incident qualification and response, from triage to resolution; you own the full cycle and run post‑mortems to prevent recurrence.
• Conduct forensic analysis on suspicious activity across our AWS multi‑account, multi‑environment infrastructure.
• Run offensive security operations, including penetration testing and Red Team exercises, to stress‑test our defenses and sharpen our detection capabilities.
• Support operational teams in embedding security best practices into their day‑to‑day workflows and architectural decisions.
• Build and maintain a security documentation framework, including standards, runbooks, and incident playbooks.
• Grow the security team, contributing to defining who we hire next and how we scale the function.

The Challenge in Numbers:

• Scale: 19M users, 130k Daily Active Users (DAU), 10,000 RPS at peak
• Infrastructure: AWS‑only, multi‑account, multi‑environment, Kubernetes
• Data: S3, DynamoDB, PostgreSQL on RDS, MongoDB, OpenSearch

Who you will work with

You will operate at the intersection of every team at MYM, working closely with back‑end, front‑end, infrastructure, and product engineers to embed security thinking across the entire organization.

As our Security Engineer, you will:

• Partner with Quentin (CTO) as your direct manager and strategic sponsor for all security initiatives.
• Collaborate with infrastructure and platform engineers on hardening, monitoring, and incident response.
• Advise product squads on secure‑by‑design principles as features are being built, not after.
• Act as the internal authority on security standards, reviewing architectures and flagging risks early.

What we are looking for

You have at least 3 years of hands‑on experience in cybersecurity, covering both offensive and defensive disciplines.

You are equally comfortable hunting threats in logs and running a Red Team exercise, and you know how to translate findings into actionable remediation.

You have a solid command of AWS security (IAM, GuardDuty, Security Hub, VPC architecture) and know how attackers move laterally in cloud environments.

You are proficient with core defensive tooling: EDR, NDR, SIEM (Sumo Logic is a plus).

You have experience in forensic investigation and incident response in production environments.

Security only works if engineers actually follow it. You know how to make security understandable, non‑blocking, and even compelling for technical and non‑technical audiences alike.

What we value

Curiosity & Drive: You relentlessly seek the why and how. You read the manual, experiment, and challenge the status quo to find smart, efficient solutions.

Accountability: You adopt an Extreme Ownership mindset, believing success is always within your scope of action. You focus solely on achieving results.

Positivity & Focus: You maintain an unwaveringly positive attitude. You prioritize finding solutions and opportunities over enumerating obstacles or excuses.

Structured Argumentation: You rigorously structure and document ideas, communicating key messages using factual, evidence‑based arguments.

Collaborative Excellence: You are committed to continuous improvement for yourself and the team, actively learning from all errors to drive collective growth.

• Storage: S3, DynamoDB, PostgreSQL on RDS, MongoDB, OpenSearch
• A rewarding experience in a dynamic and stimulating environment, within demanding tech teams where every idea matters.
• 1 remote working days per week
• AXA health insurance and cutting‑edge equipment
• Regular training programs to keep growing your skills.
• Great moments with colleagues, afterworks, team breakfasts, and team buildings.
• Modern, design offices in the heart of Paris 10th district.

Ready to join the adventure?

If you see yourself in this role and want to live a unique experience, join the MYM Team!

Recruitment process

• Interview with Omar, our Chief Ople Officer (30 minutes)
• Interview with Quentin, our CTO (1 hour)
• Live Case & Cultural Fit with the teams
• Meeting with Gauthi er, our CEO (30 minutes)