Senior IT Security Engineer - DevSecOps & Cloud Security

Pasqal; Massy; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Brand new offices in Massy

Permanent CDI contract

International team

Job summary

Pasqal is seeking a Senior IT Security Engineer to join its IT team in Massy to design, operate, and continually improve security across workplace, identity, networks, SaaS, infrastructure, and cloud environments. You will work with the Information Security Manager to turn security requirements into pragmatic solutions that enable business needs.

Key responsibilities include strengthening identity and cloud security, deploying EDR/SIEM, automating controls with IaC, and supporting ISO/IEC 27001

Qualifications

• 5–7 years of hands-on cybersecurity/IT security experience.
• Strong IAM, endpoint security, system hardening, and incident response.
• Experience with SSO, SAML, OIDC, SCIM, MFA, RBAC.
• CI/CD security, vulnerability scanning, threat modeling, and software supply-chain security.
• Ability to translate risks into pragmatic controls and document actions for auditability.

Responsibilities

• Strengthen identity, endpoint, network, and cloud security with controls and monitoring.
• Deploy and operate EDR/XDR, SIEM, IDS/IPS, logging, and alerting; manage incidents.
• Automate security controls using Python/Bash, Terraform, Ansible, and IaC in IT/CI/CD.
• Support ISO/IEC 27001 by maintain auditable controls and collaborating with teams.

Skills

IAM

Endpoint security

System hardening

Vulnerability management

Security monitoring

Audit logging

Incident response

CI/CD security

DevSecOps

Threat modeling

Software supply-chain security

Python/Scripting

Tools

Terraform

Ansible

Python

Bash

Job description

Pasqal is seeking a Senior IT Security Engineer to join its IT team in Massy to design, operate, and continually improve security across workplace, identity, networks, SaaS, infrastructure, and cloud environments. You will work with the Information Security Manager to turn security requirements into pragmatic solutions that enable business needs.

Key responsibilities include strengthening identity and cloud security, deploying EDR/SIEM, automating controls with IaC, and supporting ISO/IEC 27001