Senior DevSecOps Engineer

The Wrap; Paris; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

360Learning is seeking a Senior DevSecOps Engineer to secure the infrastructure by design, make it detectable by default, and provable at audit time. The role lives within a small, senior team handling information security, compliance, and infrastructure governance with direct impact and minimal layers to decision-making.

Located in Paris, TLS/ISO 27001:2022 and SOC 2 Type II form the audit backbone while Azure and Kubernetes power the platform.

Qualifications

• Strong DevSecOps background with cloud and containerized environments.
• Experience with Azure and Kubernetes in regulated settings.

Responsabilités

• Make infrastructure secure by design and detectable by default.
• Ensure auditable security posture for ISO 27001:2022 and SOC 2 Type II.
• Bridge security and platform engineering for end-to-end ownership of greenfield projects.

Connaissances

DevSecOps

Azure

Kubernetes

Security by design

Auditable at audit time

Description du poste

Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time.

360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II. Over the past two years the technical security workload has grown on every front: a larger and more regulated customer base sending their own scans and security assessments, a wider detection and response scope, more infrastructure to keep hardened and auditable, and a growing backlog of security engineering projects that never reach the top of the queue.

We are creating this position to add real technical capacity on the infrastructure side of security, and to move part of our security posture from manual effort to automated guardrails. You will be the bridge between security and platform engineering: deep enough in infrastructure to fix things yourself, and close enough to security operations to know what to look for.

“Ours is a small, senior team with a broad scope: information security, compliance, infrastructure governance and internal tooling, with dual audit accountability on ISO 27001:2022 and SOC 2 Type II. That means direct impact and no layers between you and the decision. Roughly half of this role is greenfield build work you will own end to end.” Guillaume Seigneuret, CISO and Hiring Coach.