Cybersecurite jobs in France
Senior DevSecOps Engineer (Offensive Security Focus)
Neotrust
Strategic Account Executive, Identity Security - France
CyberArk
PhD candidate in Microelectronics, Embedded Systems, or Cybersecurity
Grenoble INP - Institute of Engineering
Discover more opportunities than anywhere else. Find more jobs nowPostdoc in Formal Methods for Config Management Languages
UNIVERSITE D'ORLEANS
PhD in security and integrity of communications - LCIS
Grenoble INP - Institute of Engineering
Postdoctoral Researcher in formal methods applied to configuration management languages
UNIVERSITE D'ORLEANS
Connect with headhunters to apply for similar jobsCDD 10 months Senior Global Market Manager
bioMérieux
Recrute un Responsable surveillance conformité (H/F)
Union des Aéroports
Service Area Manager - Governance & IT Services Management
Volvo Group
Project Manager – Compliance of Digital Control System and Automation
NES Fircroft
Vehicle Motion Control Architect – Principal Engineer
BAE Systems - UK
Principal Engineer - Electrical Engineering (Control and Instrumentation)
BAE Systems - UK
EMEA Sr Director Solution Consulting, CoE Risk & Security
ServiceNow
Account Executive, Public Sector / Defense - France
Pure Storage
German-Speaking BDR — Remote, High-Impact Growth
GitGuardian
Senior DevSecOps Engineer (Offensive Security Focus)
Job summary
A leading cybersecurity firm is seeking a Senior DevSecOps Engineer with an Offensive Security focus to enhance application security in the Software Development Life Cycle (SDLC). This role involves hands-on penetration testing, integrating security into CI/CD pipelines, and automating security controls. Ideal candidates should have a deep understanding of secure coding and experience with tools such as Azure DevOps. The position can be hybrid or remote, offering an exciting opportunity to make a significant impact in application security.
Benefits
Qualifications
- Experience in application penetration testing focusing on OWASP Top 10.
- Understanding of secure coding practices in several programming languages.
- Familiar with manual exploitation techniques.
Responsibilities
- Perform targeted penetration tests on various application types.
- Improve automation of security controls in CI/CD pipelines.
- Collaborate with teams for security posture management.
Skills
Tools
Job Description — Senior DevSecOps Engineer (Offensive Security Focus)
Location : Hybrid (Paris) or Remote (France / Europe)
Department : Cybersecurity / DevSecOps
Seniority : Senior / Expert
Duration : 1 year (renewable)
Contract : Full-time ( Freelance )
We’re looking for a Senior DevSecOps Engineer with a strong Offensive Security mindset to elevate our application security across the full SDLC. You’ll combine hands‑on penetration testing skills with modern DevSecOps practices to find real‑world risks, automate security controls, and help engineering teams ship secure software faster.
You’ll work closely with developers, cloud / platform teams, and architects to integrate security into CI / CD, strengthen cloud‑native workloads, and build a strong secure engineering culture.
- Perform targeted penetration tests on web, API, mobile, and cloud‑native applications.
- Conduct threat modeling and adversarial analysis on critical services.
- Identify, exploit, and validate vulnerabilities to assess real impact and exploitability.
- Perform secure code reviews (manual and tooling / AI‑assisted).
- Improve SAST, SCA, DAST, IaC, and container scanning in Azure DevOps pipelines (Snyk experience is a major plus).
- Automate security gates and enforce quality thresholds in CI / CD.
- Build custom security checks, scripts, and DevSecOps automations.
- Improve developer workflows by providing secure coding guidance and actionable fixes.
- Run security reviews for new applications and major releases.
- Support Security Champions and coach development teams.
- Participate in incident response and post‑mortems for security issues.
- Collaborate with Cloud Security on posture management and remediation.
- Develop or tune AI agents to support vulnerability analysis and remediation.
- Automate correlation of findings across tools (SAST / SCA / Cloud).
- Contribute to internal security dashboards and metrics (Power BI, API integrations).
- Strong track record in application penetration testing (OWASP Top 10, API attacks, auth bypass, RCE, business logic flaws).
- Strong understanding of secure coding (C#, Java, JS / TS, Python, etc.).
- Familiarity with DAST tools plus manual exploitation techniques.
- Deep knowledge of authN / authZ (OAuth2, OIDC, JWT).
- Strong grasp of DevSecOps architecture and SDLC best practices.
- Azure DevOps pipelines
- Azure Cloud (App Services, Functions, IAM, Storage, Key Vault)
- Container security (Docker, Kubernetes basics)
- Snyk (SAST / SCA / IaC / Cloud) (highly valued)
- Burp Suite, ZAP, Nmap, Postman, Metasploit, custom scripts.
- Threat modeling methods (MITRE ATT&CK, STRIDE).
- Source code review with or without tooling.
- Ability to challenge designs and architectures from an attacker’s POV.
- Clear communication with technical and non‑technical stakeholders.
- Strong ownership, mentoring mindset, and leadership on security topics.
- Analytical thinking, problem‑solving, pragmatism.
- Certifications (preferred, not required) : OSWE / OSCP / OSEP / GWAPT , AZ-500 / AZ-400 or similar.
- Experience in large enterprise environments.
- Experience with AI‑assisted AppSec tooling and workflows.
- High‑impact role with real ownership over AppSec and DevSecOps practices.
- Modern cloud‑native stack (Azure) and a strong focus on automation.
- Opportunity to blend offensive security with engineering enablement and AI‑powered security.
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.