Senior Product Security Engineer - AI-Driven SDLC Leader

Blockchain.com; Paris; Sur place; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Unlimited vacation

Unlimited books policy

Equity

Paris in-office four days a week

Remote work flexibility

Résumé du poste

Blockchain is hiring a senior Product Security Engineer to lead secure development across Consumer, OTC and MRE lines in Paris. You will own security gates for major features, drive secure SDLC automation, and embed AI tools into the lifecycle.

You will model threats, review architecture, and translate risks into clear security policies. Role requires a proven track record in security automation, deep Kotlin/Java backend auditing, and strong stakeholder negotiation.

Qualifications

• 4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.
• Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing).
• Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. Familiar with SARIF ecosystem and ASPM workflows.
• Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).
• Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).
• Experience building CI checks, test harnesses and lightweight fuzzing/property tests.
• Excellent stakeholder skills — able to negotiate remediation with Engineering Directors and Product owners, balancing security requirements with business velocity.

Responsabilités

• Strategic Security Partnership: Act as a senior security engineer for the different product lines and own security gates for major feature releases.
• Secure SDLC Operator: Operate and improve the secure development lifecycle, CI/CD security automation, and vulnerability triage workflows.
• AI-Driven SDLC Innovation: Research and embed AI utilities and LLM agents into the secure development lifecycle.
• Threat Modelling & Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows and sign off on security architecture.

Connaissances

Security engineering

Threat modeling

CI/CD security

Code auditing Kotlin/Java

Stakeholder negotiation

Outils

CodeQL/GHAS

Snyk

SARIF

Kubernetes

Description du poste

Blockchain is hiring a senior Product Security Engineer to lead secure development across Consumer, OTC and MRE lines in Paris. You will own security gates for major features, drive secure SDLC automation, and embed AI tools into the lifecycle.

You will model threats, review architecture, and translate risks into clear security policies. Role requires a proven track record in security automation, deep Kotlin/Java backend auditing, and strong stakeholder negotiation.