Staff Product Security Engineer — Hybrid Paris | AI-Savvy

Dashlane Inc.; Paris; Hybride; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Health insurance

Extended time off + birthday/quarterly

Parental leave (up to 20 weeks paid)

Mentorship program

Flexible working hours

Donation matching

Résumé du poste

Dashlane Inc. is seeking a Staff Product Security Engineer based in Paris to safeguard our systems and keep the secure development lifecycle cutting-edge.

You will collaborate across departments to advocate for and implement best-in-class security practices for millions of users. You will conduct threat modeling, architecture reviews, and security assessments of product and infrastructure, ensuring security is integrated throughout the SDLC and CI/CD pipelines.

Qualifications

• Experience securing software development lifecycles.
• Familiarity with application security best practices and threat modeling.
• Ability to collaborate across multiple departments and mentor others.

Responsabilités

• Drive and safeguard Dashlane’s security program across product and company.
• Conduct architecture reviews, threat modeling, and security assessments of product and infrastructure.
• Ensure security is integrated in the SDLC and CI/CD pipelines.
• Scale vulnerability management and remediation tracking.
• Perform risk assessments of internal systems, environments and data, and apply security best practices.
• Participate in Compliance and Incident Response activities.

Connaissances

Security engineering

Threat modeling

SDLC

IAM (Passkeys, SAML, OAuth)

Outils

CI/CD security

SAST/DAST

Description du poste

Dashlane Inc. is seeking a Staff Product Security Engineer based in Paris to safeguard our systems and keep the secure development lifecycle cutting-edge.

You will collaborate across departments to advocate for and implement best-in-class security practices for millions of users. You will conduct threat modeling, architecture reviews, and security assessments of product and infrastructure, ensuring security is integrated throughout the SDLC and CI/CD pipelines.