Senior AppSec Architect for AI-Driven Healthcare

Semble; France; Sur place; EUR 90 000 - 100 000; Plein temps

Avantages offerts par ce poste

Private health insurance

Flexible hybrid working (France/Europe

MacBook & home-office setup

Paris office access

Résumé du poste

Semble is seeking a hands-on security leader to define application security for a healthcare cloud platform. You will own secure SDLC, threat modelling for AI-enabled features, and lead SAST/SCA/DAST, container, and IaC scanning across CI/CD.

You will influence architecture, policy, and audits with a strong emphasis on privacy and patient data protection. You will collaborate with engineers, product and security teams to implement robust security controls, participate in ISO 27001 and related

Qualifications

• 5+ years in application security/related field
• Hands-on Snyk experience across SCA/SAST/Container/IaC with CI/CD integration
• Strong knowledge of web/API security, OWASP Top 10, API Security Top 10, and agentic apps
• Experience embedding security in Agile/DevSecOps workflows
• Knowledge of authentication/authorization, secrets management, encryption, and cloud controls
• ISO 27001 experience; Cyber Essentials+/NHS DSPT/SOC 2 preferred
• Understanding AI security risks: prompt injection, LLM vulnerabilities, agentic threats
• SaaS/regulated industry experience balancing product/engineering/security
• Clear communication to engineers/leadership/customers
• Experience using AI to improve security ops/engineering
• Ownership mindset and audit-readiness
• French proficiency
• CISSP certification
• Threat modelling (STRIDE/attack trees)
• Familiarity with API gateways, containers, software supply chain, AI-enabled features
• Experience scaling security in growing org
• Healthcare data regulation or NHS security experience

Responsabilités

• Define and drive secure SDLC standards and guidelines
• Lead threat modelling for new features and AI capabilities
• Own SAST, SCA, DAST, container and IaC scanning; integrate with CI/CD
• Manage end-to-end vulnerability workflows: classification, SLAs, remediation
• Advise on authorization, secrets and data protection, zero-trust design
• Review cloud-native services for security alignment with product goals
• Govern AI security governance and third-party AI integrations
• Monitor alerts, incidents, and runbooks; support incident reviews
• Support ISO27001/Cyber Essentials+/NHS DSPT/SOC 2 readiness
• Engage with customers on security topics and due diligence

Connaissances

Application security

Agile/DevSecOps

Communication

Threat modelling

AI security knowledge

SaaS/regulatory experience

French proficiency

CISSP

NIST/ISO awareness

Security governance

Outils

Snyk

CI/CD tooling

OAuth 2.0/OIDC

Kubernetes

Cloud security tooling

Description du poste

Semble is seeking a hands-on security leader to define application security for a healthcare cloud platform. You will own secure SDLC, threat modelling for AI-enabled features, and lead SAST/SCA/DAST, container, and IaC scanning across CI/CD.

You will influence architecture, policy, and audits with a strong emphasis on privacy and patient data protection. You will collaborate with engineers, product and security teams to implement robust security controls, participate in ISO 27001 and related