Senior Security Engineer — Hands-On, Remote, Open-Source

Kestra Technologies; Villeneuve-d'Ascq; À distance; EUR 85 000 - 120 000; Plein temps

Avantages offerts par ce poste

Work from anywhere

Health coverage

Home office setup on us

Résumé du poste

Kestra Technologies is seeking a Senior Security Engineer to own the end-to-end security posture of our platform, infrastructure, and open-source ecosystem. This remote-first role combines hands-on security work with engineering delivery.

You will conduct pentesting, threat modeling, vulnerability management, and patch remediation while hardening our cloud infra and CI/CD pipelines. Ambitious, autonomous builders will thrive here.

Qualifications

• 5+ years of experience in Security Engineering, DevSecOps, or related roles.
• Strong hands-on penetration testing background.
• Builder/fixer mindset: read code, understand exploits, and guide remediation.
• Deep familiarity with cloud security (AWS or GCP) and containerized environments (Kubernetes, Docker).
• Experience with dependency and supply-chain security (CVE management, open-source licensing, SCA tools).
• Fluent in English and able to work autonomously in a remote environment.
• Adaptability to a fast-paced open-source startup environment.

Responsabilités

• Conduct hands-on penetration testing and threat modeling across web apps, APIs, control plane, and cloud environments.
• Manage end-to-end vulnerability tracking across codebases, dependencies, containers, and cloud infra.
• Proactively fix security flaws by writing patches, PRs, or guiding remediation with product teams.
• Audit and harden cloud infrastructure (GCP, Kubernetes, networking) against threats.
• Automate security tooling into CI/CD pipelines (SAST, DAST, scanners) to catch CVEs before production.
• Perform security code reviews and evaluate dependencies, open-source integrations, and supply-chain risks.
• Lead incident response efforts and establish monitoring, detection, and mitigation strategies.
• Own our public security posture as an open-source project: disclosures, CVEs, advisories.

Connaissances

Penetration testing

Threat modeling

Cloud security

Kubernetes / Docker

Open-source security / SCA

English fluency

Outils

Trivy

GitHub Security

Dependabot

Elastic Security

Docker

Kubernetes

Terraform

GCP

PostgreSQL

Elasticsearch

Redis

Kafka

AMQP

ELK

Prometheus

Grafana

GitHub Actions

ArgoCD

Description du poste

Kestra Technologies is seeking a Senior Security Engineer to own the end-to-end security posture of our platform, infrastructure, and open-source ecosystem. This remote-first role combines hands-on security work with engineering delivery.

You will conduct pentesting, threat modeling, vulnerability management, and patch remediation while hardening our cloud infra and CI/CD pipelines. Ambitious, autonomous builders will thrive here.