Senior Security Engineer

DataDome; France; Sur place; EUR 70 000 - 90 000; Plein temps

Avantages offerts par ce poste

500€ stipend for workspace setup

Generous health benefits

Annual allowance for leisure activities

Events & team building

PTO policy providing 25 days in France

Résumé du poste

DataDome is seeking a Senior Security Engineer to enhance their engineering-facing security function. The ideal candidate will have a strong technical background in application, cloud, and infrastructure security with over 7 years of experience.

This role focuses on various aspects of security, from product security to AI-enabled workflows, and requires collaboration with engineering teams to implement secure practices effectively.

Benefits include flexible working arrangements, generous health benefits, and a professional development budget. Join us in Paris or work remotely!

Qualifications

• Minimum of 7 years of experience in technical security.
• Experience in a SaaS or internet-scale product environment.
• Proficiency in both French and English.

Responsabilités

• Contribute to architecture, design, and implementation reviews.
• Support threat modeling and secure-by-design practices.
• Advise on application and cloud security topics.

Connaissances

Application security

Cloud and infrastructure security

Secure software supply chain

AI security

Risk assessment

Outils

Security tooling

Description du poste

At DataDome, security is a core part of how we build and scale. Our security team already covers GRC, SecOps, and security leadership, and we are now looking for a senior individual contributor to strengthen the engineering-facing side of the function.

As DataDome evolves from a single product into a broader platform, our security scope is expanding across product, infrastructure, internal systems, and AI-enabled workflows. At the same time, our regulatory and assurance requirements are becoming more demanding, including ISO 27001 and SOC 2.

We are looking for a Senior Security Engineer with a strong technical background, able to work closely with engineering teams and bring practical security expertise to product security, cloud security, application security, secure software supply chain, security tooling, and AI security topics.

This role reports directly to the Head of Security. It is a pure individual contributor position with no management responsibilities. Impact comes from technical depth, hands‑on execution, and cross‑functional influence.

You will be more specifically in charge of things like…

Product, cloud, and application security

• Contribute to architecture, design, and implementation reviews for new features, services, platform changes, and cloud initiatives.
• Support pragmatic threat modeling and secure‑by‑design practices across APIs, services, data flows, workloads, and platform components.
• Advise engineering teams on application security, cloud and infrastructure security, and secure software supply chain topics.
• Help teams make sound security trade‑offs and support remediation on complex or high‑priority topics.

AI security and enablement

• Contribute to the security of AI‑related product capabilities, including model, pipeline, data flow, and integration considerations.
• Assess technical security risks related to internal AI usage, including data exposure, acceptable use, and vendor‑related concerns, in partnership with the GRC function where relevant.
• Identify practical opportunities to leverage AI in security workflows, including threat analysis, remediation support, security reviews, and compliance‑related automation.

Technical risk and security enablement

• Bring strong technical depth to security and risk discussions by helping identify realistic attack paths, assess practical impact and likelihood, and translate findings into pragmatic remediation priorities.
• Partner with the GRC function to ensure risk assessments are supported by strong technical input and connected to concrete engineering actions.
• Explain risks, trade‑offs, and recommendations in a way that drives action across engineering and cross‑functional teams.
• Make secure practices easier to adopt through clear guidance, repeatable patterns, automation, and pragmatic support.

Security tooling improvement

• Contribute to improving and evolving our security tooling, in close collaboration with SecOps, with a focus on making security signals, posture insights, and remediation workflows more useful for Security and Engineering teams.
• Develop use cases, dashboards, workflows, and integrations that help teams better understand, prioritize, and remediate security issues.

Qualifications

• Bring a strong technical security foundation (+7 years) across application security, cloud and infrastructure security, and secure software supply chain.
• Have worked in a SaaS or internet‑scale product environment where security had to move at engineering speed.
• Be comfortable working close to engineering teams: reviewing designs, challenging assumptions, supporting remediation, and turning security needs into practical improvements.
• Enjoy going deep into security tools and using them to improve visibility, prioritization, remediation, and engineering workflows.
• Bring hands‑on security expertise to identify meaningful risks, evaluate practical impact, and guide pragmatic remediation priorities.
• Be comfortable stepping in on urgent or high‑impact security topics when needed, including incidents, emerging threats, complex remediations, and fast‑moving cross‑functional issues.
• Thrive in a small team setup — own a broad scope, move fast without heavy process, and adapt when priorities shift.
• French and English proficiency (working language is English, remote‑friendly with occasional presence in Paris).

Bonus Points

• Experience with SOC 2 Type II and third‑party risk management in a SaaS environment.
• Experience with Vanta or similar GRC automation platforms.
• Familiarity with AI governance topics or security implications of AI tooling.

Benefits

• Flex Life: While we offer remote, hybrid, and in‑office options for each position, our Parisian office is located next to the Opera Garnier. You will also receive a 500€ stipend to help you set up your ideal workspace if you work hybrid or remotely.
  • If you are fully remote, the SNCF discount card is paid for you to come to our office to visit us and your team.
• Generous Health Benefits: We have partnered with Kenko for your healthcare needs.
• A 100€ annual allowance is provided for a leisure activity of your choice in sports or culture.
• An annual allowance of 200€ if you come to the office by bike to cover maintenance costs.
• Professional Development: We invest in an internal Learning and Development platform and offer the opportunity to request additional training and support via your manager.
• Events & Team building: We organise annual company off‑site events, drinks, winter party, lunch & learns, and more as part of our culture.
• Parent Care: Gift and care packages for parents.
• PTO: Based on the country you are in (e.g., 25 days in France).

DataDome is an equal‑opportunity employer, and proud to be committed to diversity and inclusion. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability, or age.