Senior DevSecOps Engineer

360Learning; Paris; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

360Learning is seeking a Senior DevSecOps Engineer to strengthen security by design, with hands-on Azure and Kubernetes work. You will drive automated guardrails, support ISO 27001:2022 and SOC 2 Type II audits, and bridge security with platform engineering.

The role offers direct impact in a small, senior team and a chance to influence both security operations and infrastructure governance. The ideal candidate will onboard quickly, map cloud controls, collaborate across DevOps and IT, and own

Responsabilités

• Complete onboarding and learn how we work through our own platform and Convexity culture.
• Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer.
• Meet the DevOps, platform engineering and IT teams you will work with daily.
• Shadow alert triage and one customer security assessment end to end.
• Be autonomous on our AKS and Azure environment.

Description du poste

Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time. 360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II. Over the past two years the technical security workload has grown on every front: a larger and more regulated customer base sending their own scans and security assessments, a wider detection and response scope, more infrastructure to keep hardened and auditable, and a growing backlog of security engineering projects that never reach the top of the queue. We are creating this position to add real technical capacity on the infrastructure side of security, and to move part of our security posture from manual effort to automated guardrails. You will be the bridge between security and platform engineering: deep enough in infrastructure to fix things yourself, and close enough to security operations to know what to look for. “Ours is a small, senior team with a broad scope: information security, compliance, infrastructure governance and internal tooling, with dual audit accountability on ISO 27001:2022 and SOC 2 Type II. That means direct impact and no layers between you and the decision. Roughly half of this role is greenfield build work you will own end to end.” Guillaume Seigneuret, CISO and Hiring Coach.

Within 1 month, you will:

• Complete our onboarding and learn how we work through our own platform and our Convexity culture
• Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer
• Meet the DevOps, platform engineering and IT teams you will work with daily
• Shadow alert triage and one customer security assessment end to end

Within 3 months, you will:

• Be autonomous on our AKS and Azure e