Security Engineer: Product Security & BugBounty Lead

Youtrust; Paris; On-site; EUR 53,000 - 79,000; Full time

Benefits offered by this job

Stock options

Meal vouchers

Insurance

Wellbeing program

Transport allowance

RTT & volunteering time

Learning budget

Job summary

Youtrust seeks a Security Engineer to act as the embedded security partner across the company. Lead security reviews from feature scoping to risk-based unblocking, and manage BugBounty and vulnerability remediation with cross-functional teams.

You will contribute to the security of the Trusted Zone, fraud detection, and regulatory compliance, while promoting secure-by-design practices and automation to improve efficiency.

Qualifications

• Hands-on expertise in web app and API security.
• Ability to run threat modeling sessions and produce clear decisions.
• Experience triaging and remediating vulnerabilities across product perimeter.
• Participation in or running BugBounty programs and triage workflows.
• Active use of AI to automate security tasks and integrate into workflows.

Responsibilities

• Lead end-to-end security review cycle for all features.
• Own and operate BugBounty program: triage, remediation, rewards.
• Identify and track remediation of vulnerabilities across product and infra perimeter.
• Contribute to security of Trusted Zone, fraud detection, and compliance efforts.
• Support regulatory compliance (eIDAS, NIS2, ISO 27001) with technical controls.
• Extend security posture across the company, provide guidance.
• Take part in weekly on-call rotations and build automation to reduce toil.
• Share knowledge and coach teams on secure-by-design practices.

Skills

Web security

API security

Threat modeling

BugBounty experience

AI tooling

Security reviews

Tools

Burp Suite

OWASP

Vulnerability management

Bug bounty platforms

Job description

Youtrust seeks a Security Engineer to act as the embedded security partner across the company. Lead security reviews from feature scoping to risk-based unblocking, and manage BugBounty and vulnerability remediation with cross-functional teams.

You will contribute to the security of the Trusted Zone, fraud detection, and regulatory compliance, while promoting secure-by-design practices and automation to improve efficiency.