Senior Product Security Engineer - Remote w/ Stock Options

Dfns; Paris; Remote; EUR 135.000 - 225.000; Vollzeit

Benefits dieser Stelle

Healthcare coverage

Home technology allowance

MacBook provided

Flexible vacation

Travel expenses covered

Zusammenfassung

DFNS is seeking a Staff Product Security Engineer to own the security of the product stack, from threat modeling to incident response. You will embed security into CI/CD, run pentests and bug bounty, and coordinate with client security teams during audits. Strong cryptography, TypeScript, Rust (Go), and AWS security expertise are required.

You will influence design decisions, raise security standards, and lead the way in secure coding practices across distributed teams worldwide.

Qualifikationen

• Hands-on application security on systems handling money or sensitive data.
• Ability to read/write TS and Rust (or Go) to review and fix issues.
• Experience building security into CI/CD with SAST/DAST and supply-chain controls.
• Applied cryptography fluency: TLS, PKI, keys, and signing paths.
• Cloud security on AWS including IAM, networking, KMS or Nitro Enclaves.
• Experience running pentests or bug bounty and incident response.
• Strong communication with engineers and external security teams.

Aufgaben

• Own product security across the platform from threat modeling to code review.
• Integrate secure SDLC into CI/CD with automated gates and SBOM tracking.
• Lead vulnerability management and coordinate fixes with Engineering.
• Run external pentests and bug bounty programs and manage incidents.
• Interface with clients during due diligence and audits; provide security guidance.
• Develop reusable security patterns and training for engineers.

Kenntnisse

Threat modeling

Code review

Dynamic testing

TypeScript

Rust

Go

CI/CD security

SAST

DAST

Cryptography

AWS Cloud security

Incident response

Bug bounty

Communication with security teams

Tools

SAST

DAST

SBOM

Secrets scanning

MPC

HSM integration

Jobbeschreibung

DFNS is seeking a Staff Product Security Engineer to own the security of the product stack, from threat modeling to incident response. You will embed security into CI/CD, run pentests and bug bounty, and coordinate with client security teams during audits. Strong cryptography, TypeScript, Rust (Go), and AWS security expertise are required.

You will influence design decisions, raise security standards, and lead the way in secure coding practices across distributed teams worldwide.