Senior AppSec Engineer - Remote, Cloud & AI Security

Applied Methods Ltd; Paris; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Nabla in Paris is seeking a Senior Security Engineer to scale our healthcare AI platform. This hands-on role focuses on AppSec across cloud, CI/CD, and AI-driven features, partnering with product squads to design threat models, implement secure authN/authZ, and reduce risk across APIs and data flows.

You will triage SAST/SCA findings, enforce secure-by-default libraries, and build guardrails for secure coding. Fluency in French and English is required with 5–8+ years in security engineering.

Qualifications

• 5 to 8+ years in security engineering, including app security experience.
• Strong knowledge of web/API security, OAuth2/OIDC, tokens and multi-tenancy.
• Proficient in Kotlin and Python and automating security in code.
• Experience with threat modeling and CI/CD security pipelines.
• Excellent communication with engineers, compliance and IT.

Responsabilités

• Partner with product squads to design threat modeling and secure authN/authZ decisions.
• Secure authentication surfaces (OAuth clients, tokens, session design) and prevent access control flaws.
• Triage and prioritize findings from SAST, SCA, secrets scanning, and AI code review.
• Secure AI/LLM features, guard AI prompts, and de-identification controls.
• Run external pentests, validate fixes, and support vulnerability disclosure program.

Connaissances

Security engineering

AppSec

Threat modeling

OAuth 2.0 / OIDC

Kotlin

Python

CI/CD security

French fluency

English fluency

Outils

SAST

SCA

Secrets scanning

IaC security

Description du poste

Nabla in Paris is seeking a Senior Security Engineer to scale our healthcare AI platform. This hands-on role focuses on AppSec across cloud, CI/CD, and AI-driven features, partnering with product squads to design threat models, implement secure authN/authZ, and reduce risk across APIs and data flows.

You will triage SAST/SCA findings, enforce secure-by-default libraries, and build guardrails for secure coding. Fluency in French and English is required with 5–8+ years in security engineering.