Staff Product Security Engineer — Lead Secure SDLC & AI

Cyberjobs; Paris; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Flex Benefits

Health Insurance

Well-being days

Parental leave

Mentorship program

Flexible hours

Donation matching

Mental health support

Team events

Office lunches

Job summary

Dashlane, based in Paris, seeks a Staff Product Security Engineer to advance its secure development lifecycle and protect millions of users. You will collaborate across departments to implement best-in-class security practices and strengthen vulnerability management.

The role emphasizes architecture reviews, threat modeling, and risk assessments within a hybrid Paris work model, with flexible collaboration across in-person and remote work.

Qualifications

• Familiarity with application security best practices and threat modeling.
• Experience operating within an SDLC program.
• Understanding of CI/CD pipelines and their security implications.
• Familiarity with Identity and Access Management frameworks and protocols (Passkeys, SAML, OAuth, SCIM, etc).
• Interest in enabling secure use of AI tools to drive efficiency and impact.

Responsibilities

• Drive continuous improvement of Dashlane's security program across product and company.
• Conduct architecture reviews, threat modeling, and security assessments of product and infrastructure to identify risks and provide mitigation guidance.
• Ensure security best practices are integrated throughout the SDLC.
• Scale Vulnerability Management to track, analyze, and remediate vulnerabilities.
• Perform risk assessments of internal systems, environments, assets and data, and implement security best practices.
• Participate in Compliance and Incident Response activities.

Skills

Application security

SDLC security

CI/CD security

IAM protocols

AI security tools

Job description

Dashlane, based in Paris, seeks a Staff Product Security Engineer to advance its secure development lifecycle and protect millions of users. You will collaborate across departments to implement best-in-class security practices and strengthen vulnerability management.

The role emphasizes architecture reviews, threat modeling, and risk assessments within a hybrid Paris work model, with flexible collaboration across in-person and remote work.