Senior security engineer

tsuga.com; Paris; On-site; EUR 90,000 - 140,000; Full time

Job summary

Tsuga seeks its first dedicated Security Engineer to shape how security works across the product, infrastructure, and internal tooling, with direct support from the CTO.

You will own the security posture, drive compliance, and build scalable processes from the ground up, enabling engineers while reducing risk in a fast-growing startup.

Qualifications

• Hands-on security of cloud infra and Kubernetes.
• Experience with SOC 2 or ISO 27001 cycles.
• Comfort reading and contributing to code (TypeScript, Rust, Python, or Pulumi).
• Strong communication with engineers, customers, auditors, and leadership.

Responsibilities

• Own the security posture across the product, control plane, data planes, and internal tooling.
• Partner with Forward Deployed Engineers to communicate security incidents and vulnerabilities.
• Drive compliance and certifications with the CTO; automate evidence collection.
• Threat-model critical systems interacting with customer environments.
• Own the customer security process from questionnaires to security reviews.
• Build security into the development lifecycle with CI checks and IaC reviews.

Skills

Cloud security

Kubernetes security

Code review

Communication skills

Tools

Pulumi

Aikido

Drata

Job description

You don't have to match 100% of the requirements. If you believe you're a strong fit, we'd love to hear from you.

We just raised $35M in Series A, if you join Tsuga you will experience a strong growth.

About the role & the team

At Tsuga, security has always been everyone’s responsibility. We want to keep it that way — but we’ve reached the point where we need someone whose full-time focus is raising the bar, setting the direction, and making it easy for every engineer to build securely.

As our first dedicated Security Engineer, you’ll shape how security works at Tsuga from the ground up. You’ll have the opportunity to influence our product, infrastructure, engineering practices, and customer-facing security, with direct support from the CTO.

Where we're at today

You’re not starting from scratch. We already have:

• mTLS between our control plane and customer clusters, tunneled connections, and strong admin authentication
• Aikido for code and dependency scanning, and Drata for compliance automation
• ISO 27001 and SOC 2 certification

What you'll do

• Own our security posture across the product — including the control plane, customer data planes, and internal tooling. Define security practices, review designs, and help engineers ship securely.
• Partner with our Forward Deployed Engineers to ensure customers receive clear, consistent, and timely communication around security incidents and vulnerabilities.
• Drive compliance and certifications alongside the CTO. Improve and automate the evidence collection and processes behind ISO 27001 and SOC 2.
• Threat-model critical systems that interact with customer environments, including credentials, tunnels, deployment paths, and IAM.
• Own the customer security process, from questionnaires and pentests to security reviews, and turn it into a scalable, repeatable workflow.
• Build security into the development lifecycle through CI checks, dependency management, secrets management, and infrastructure-as-code reviews.

About you & what we are looking for

• Hands-on experience securing cloud infrastructure and Kubernetes, ideally across multiple cloud providers.
• You’re comfortable reading and writing code. Our stack includes TypeScript, Rust, Python, and Pulumi — you don’t need to know all of them, but you should be comfortable reviewing and contributing to code.
• Experience with at least one SOC 2 or ISO 27001 certification cycle, and a good sense of what effective security and compliance tooling looks like.
• A pragmatic approach to risk. You enable engineers rather than gatekeep them.
• Strong communication skills — you can work effectively with engineers, customers, auditors, and leadership.

Working at Tsuga

• We move fast. As an early-stage startup, we are pragmatic, we value ownership, and quick feedback over unnecessary process and hierarchy.
• We solve problems, not blame people. When something goes wrong, we fix it, learn from it, and improve the system.
• We are builders. We start everything from a blank page and we lean on your colleagues' knowledge to move faster.
• We are customer-obsessed. We dogfood Tsuga every day, so you care how the product is actually used and want to contribute ideas.
• We lean hard on AI, but not blindly. Our problems are hard and can’t be AI-slopped away.
• We’re international from day one. Every quarter, the whole team meets at our French office to align on company goals, celebrate wins, and connect with teammates from the US, UK, the Middle East, and across Europe.