Senior Platform Security Engineer — Cloud & SRE

Gorgias; Paris; Sur place; EUR 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

5‑week vacation + 2 weeks RTT

Private health insurance

Home workstation budget €700

Learning material and wellness budget

Annual company summit and off-sites

Résumé du poste

Gorgias is hiring a Platform Security Engineer to strengthen our security program alongside the SRE team. You’ll implement tools and processes to defend against external threats while enabling scalable enterprise-grade security across multi‑cloud environments.

You’ll own cloud security, runbooks, and compliance initiatives, build secure CI/CD pipelines, and craft incident response playbooks. If you thrive at the intersection of security, automation, and SaaS, this role offers impact across the

Qualifications

• 5+ years in infrastructure security or security engineering.
• Deep GCP and Kubernetes expertise.
• Strong networking fundamentals (VPC, firewall, zero-trust).
• Hands-on CI/CD and IaC hardening experience.
• Auth (OAuth 2.0, OIDC, SAML) expertise.
• Policy-as-code with OPA/Kyverno.
• Detection and response with SIEM/IDS.
• Compliance experience: SOC 2, ISO 27001, GDPR.

Responsabilités

• Own cloud and Kubernetes security, IAM, RBAC, policies across 10+ clusters.
• Design secure-by-default platforms with guardrails.
• Harden CI/CD and IaC pipelines end-to-end.
• Lead secrets management and zero-trust networking.
• Build security-focused logging and monitoring.
• Implement runtime detection and incident response playbooks.
• Manage SIEM and automate mitigations.
• Audit and enforce strong auth standards.
• Drive compliance health and ISO SOC 2.

Connaissances

GCP

Kubernetes

Networking

CI/CD

IaC security

Auth & identity

Scripting

Python

Go

Outils

GitHub Actions

ArgoCD

Terraform

OPA

Kyverno

GKE

Description du poste

Gorgias is hiring a Platform Security Engineer to strengthen our security program alongside the SRE team. You’ll implement tools and processes to defend against external threats while enabling scalable enterprise-grade security across multi‑cloud environments.

You’ll own cloud security, runbooks, and compliance initiatives, build secure CI/CD pipelines, and craft incident response playbooks. If you thrive at the intersection of security, automation, and SaaS, this role offers impact across the