Staff Product Security Engineer (Remote)

DFNS; Paris; Remote; EUR 136.000 - 226.000; Vollzeit

Benefits dieser Stelle

MacBook provided

Stock options (4-year vesting)

Healthcare

Flexible vacation

Parental leave

Home technology allowance

Travel expenses covered

Remote first

Zusammenfassung

DFNS is seeking a Staff Product Security Engineer to own the security of the platform from threat modeling to incident response. You will integrate automated security gates into CI/CD, lead vulnerability management, and oversee external pentests and audits with client security teams.

You should be hands-on with TypeScript and Rust (or Go), plus deep AWS security experience and strong communication with engineers and CISOs.

Qualifikationen

• Hands-on application security on production systems handling money or sensitive data.
• Ability to read/write TypeScript and Rust (or Go) to review and fix security issues.
• Experience building security into CI/CD with SAST/DAST, dependency and supply chain controls and secrets management.
• Applied cryptography fluency; understanding keys, signatures, TLS and PKI in practice.
• Cloud security on AWS including IAM, networking and KMS or Nitro Enclaves.
• Experience running pentests or a bug bounty and leading incident response.
• Communication with engineers and external security teams such as bank CISOs and auditors.

Aufgaben

• Own product security across the platform from threat modeling and design reviews to code review and dynamic testing.
• Build the secure development lifecycle into CI/CD with automated gates (SAST/DAST, SBOM, signing, provenance) and secrets scanning.
• Lead vulnerability management including triage, prioritization, fixes, and security releases with Engineering.
• Run external pentests and the bug bounty program and collaborate with researchers.
• Lead incident response for product security events from detection through post-mortems and controls.
• Represent security in client due diligence and audits, including security questionnaires and architecture sessions.
• Raise the bar for engineers via secure coding guidance and reusable security patterns.

Kenntnisse

TypeScript

Rust

Go

Threat modeling

Code review

SAST/DAST

CI/CD security

Cryptography

AWS security

Incident response

Tools

AWS

KMS

HSMs

SBOM

CI/CD tooling

Jobbeschreibung

DFNS is seeking a Staff Product Security Engineer to own the security of the platform from threat modeling to incident response. You will integrate automated security gates into CI/CD, lead vulnerability management, and oversee external pentests and audits with client security teams.

You should be hands-on with TypeScript and Rust (or Go), plus deep AWS security experience and strong communication with engineers and CISOs.