Senior Software Engineer Endpoint

GitGuardian; Paris; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Stock options

Lunch voucher (Swile)

Wellpass (gymlib)

Health insurance for children

Home office stipend

Yearly holiday allowance

Team building budget

AI tools access

Job summary

GitGuardian is seeking a skilled engineer to join its Endpoint team in Paris. You will develop an agent running on macOS, Linux, and Windows to detect secrets and risky configurations, while managing updates and OS permissions.

You will contribute to ggshield and help design data ingestion for thousands of machines, collaborating with web platform engineers. You will work in a fast-paced environment that values pragmatic, hands-on delivery, with strong emphasis on product impact and daily use of

Qualifications

• 3+ years of software engineering experience, ideally 5+.
• You write production-grade Rust: ownership model, async, idiomatic error handling, and you have shipped multi-platform binaries.
• You have delivered software installed on end-user machines (agent, desktop app, CLI distributed at scale).
• You think product and business impact first: you prioritise what moves the needle for customers.
• You are a self-starter: you take ownership of topics end to end.
• You are pragmatic and hands-on: you ship, then iterate.
• You communicate clearly in English, written and oral.
• You use AI tools in your daily development workflow.

Responsibilities

• Build the endpoint agent: a lightweight program running on macOS, Linux and Windows, detecting secrets and risky configurations and reporting them.
• Own the delivery constraints of software installed on end-user machines: updates, OS permissions, CPU and memory footprint, and security risks.
• Contribute to ggshield, our open-source CLI, as the foundation of the endpoint product.
• Design how we ingest, structure and expose data from thousands of machines with the web platform engineers.
• Move fast to reach commercial success, while ensuring scalable architectures.
• Use AI in your workflow to ship faster and review better.

Skills

Rust

End-user software

Product mindset

Self-starter

English communication

AI in workflow

Tools

Python

Django

FastAPI

React

Kubernetes

Docker

Terraform

AWS

PostgreSQL

Job description

About GitGuardian

GitGuardian is a global cybersecurity scale-up. The company is based in Paris, New-York City, Boston.

Our early investors include Scott Chacon, co-founder of GitHub, and Solomon Hykes, co-founder of Docker, alongside leading US and European VC firms. We raised our Series C in early 2026

GitGuardian leads the way in securing the credential layer, helping organizations protect the secrets that let code, machines, and AI agents access systems with broad detection, identity context, and remediation at scale. Already trusted by 600K+ developers worldwide and by 50 of the Fortune 500!

About your team and mission

Most recent supply-chain attacks start the same way: an attacker steals secrets from a developer’s laptop. A developer machine can no longer be treated as a safe place, and security teams have almost no visibility on it.

The Endpoint team is building GitGuardian’s answer to that problem: a new product that scans developer machines for secrets and AI agent configurations, then reports everything to a central platform where security teams track their posture over time and give developers the tools to fix issues themselves.

The first version works, runs daily on developer machines and is being tested by our first customers. Feedback is strong, and the next challenge is to turn it into a product we deploy at scale. It is also the first time GitGuardian ships software that runs directly on customer endpoints, which is why we are looking for engineers who know this environment.

You will join a team of 4 senior engineers with complementary profiles (Rust, web), managed by an Engineering Manager. The team is growing fast: 4 more engineers will join in the coming months.

Your main mission will be to:

• Build the endpoint agent: a lightweight program running continuously on macOS, Linux and Windows, detecting secrets and risky configurations and reporting them when needed.

• Own the delivery constraints of software installed on end-user machines: updates, OS permissions, CPU and memory footprint, and the security risks specific to this environment.

• Contribute to ggshield, our open-source CLI, which is the foundation of the endpoint product : https://github.com/GitGuardian/ggshield

• Design how we ingest, structure and expose the data collected from thousands of machines, together with the engineers working on the web platform.

• Move fast to reach commercial success, while making architecture choices that will not block the product later.

• Use AI in your own workflow to ship faster and review better.

Technical environment

• Backend: Python + Django, RabbitMQ, Redis

• DB: PostgreSQL, ClickHouse

• Frontend: React / Typescript

• Deployment: Kubernetes, Docker, Terraform, AWS

About you

Here’s what we consider essential for success in this role:

• You have 3+ years of software engineering experience, ideally 5+.

• You write production-grade Rust: ownership model, async, idiomatic error handling, and you have shipped multi-platform binaries.

• You have delivered software installed on end-user machines (agent, desktop app, CLI distributed at scale): you know how to handle updates, OS permissions on macOS, Linux and Windows, and resource footprint.

• You think product and business impact first: you prioritize what moves the needle for customers.

• You are a self-starter: you take ownership of topics end to end and identify problems before being asked.

• You are pragmatic and hands-on: you ship, then iterate.

• You communicate clearly in English, written and oral, and share knowledge with your team.

• You use AI tools in your daily development workflow, or you are eager to.

The following skills would strengthen your application but aren’t required:

• You have worked on EDR, endpoint security or security agents.

• You have experience with Python, including web frameworks (Django, FastAPI, Flask).

• You have built production web applications and APIs.

• You have designed large-scale data models and storage for high-volume ingestion.

• You speak French.

The interview process

1. Video call with a Talent Acquisition team member

To discover your professional project and evaluate if there could be a mutual match.

2. Technical interview

To evaluate your skills for the position and project yourself into the role.

3. Team interview / Interview with your future manager

To know more about yourself and your achievements, and present to you the team.

4.1 Final interview with an Executive Manager

To detail our company’s vision and ambitions for the next couple of years.

4.2 References check

You can start thinking about two contacts who can attest to your previous or current professional experiences. These contacts should be as recent as possible, and we will call them at the end of the process.

Benefits

Package that includes stock-options
Sponsored lunch voucher (Swile)
Sponsored Wellpass (gymlib)
Non-charged health insurance for children (Sidecare / Generali)
Up to €300 to improve your home office set-up
Yearly holiday allowance
Team building: monthly budget dedicated to each employee that you can spend as you wish, with colleagues (latest examples to date: Michelin star restaurant, karaoke, stand-up show, kitesurfing week-end, ...)

And also...

Remote policy: hybrid (3 days/week at the office in Paris)
Full, company-wide access to cutting-edge AI tools to stay ahead of the curve
Opportunities for career development in the long term
Referral bonus of 4000€ for any new Guardian we might hire thanks to you