Staff Application Security Engineer — Lead Secure SDLC

CyberJobs.Com; Paris; Hybride; EUR 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Health insurance

Mentorship program

Commuting allowance

Meal vouchers

Parental leave

Résumé du poste

Dashlane is seeking a Staff Application Security Engineer based in Paris with a hybrid work model. You will safeguard Dashlane’s systems and advance the secure development lifecycle, collaborating across teams to implement best-in-class security practices for millions of users.

You will lead threat modeling, architecture reviews, and vulnerability management, ensuring security across product and infrastructure while mentoring teammates and shaping the security program.

Qualifications

• Strong understanding of application security best practices, including experience with threat modeling and risk assessments.
• Demonstrated experience building or improving an SDLC program
• Familiarity with CI/CD pipelines and their security implications
• Familiarity with cloud infrastructure (e.g., AWS, Azure, Kubernetes), and Infrastructure-as-Code (e.g., Terraform)
• Interest in enabling secure use of AI tools to drive efficiency, creativity, and impact internally
• An interest in cryptography and its application in modern systems
• Experience in Identity and Access Management (IAM) frameworks and protocols (Passkeys, SAML, OAuth, SCIM, etc)

Responsabilités

• Drive the continuous improvement of Dashlane’s security program across the product and company.
• Conduct architecture design reviews, threat modeling, and technical security assessments of Dashlane’s product (application and infrastructure) to identify security risks and provide mitigation guidance.
• Ensure security best practices are integrated throughout the software development lifecycle (SDLC).
• Build upon and scale Vulnerability Management to ensure the team can track, analyze, and manage vulnerabilities and their remediation.
• Perform risk assessments of Dashlane’s internal systems, environments, assets, and data, and implement security best practices accordingly.
• Evaluate and implement security tooling and/or build customized tooling in-house where necessary.
• Participate in Compliance and Incident Response.
• Innovate and propose new forward-looking security features that protect Dashlane and our users.

Connaissances

Application security

SDLC

CI/CD security

Cloud & IaC

AI security awareness

Outils

Kubernetes

Terraform

AWS

Azure

Description du poste

Dashlane is seeking a Staff Application Security Engineer based in Paris with a hybrid work model. You will safeguard Dashlane’s systems and advance the secure development lifecycle, collaborating across teams to implement best-in-class security practices for millions of users.

You will lead threat modeling, architecture reviews, and vulnerability management, ensuring security across product and infrastructure while mentoring teammates and shaping the security program.