Security Engineer - Paris / Lyon / Cracow

LumApps SAS; Kraków; On-site; PLN 120,000 - 160,000; Full time

Benefits offered by this job

Phone & Home Internet reimbursement

Private healthcare with Luxmed

Cafeteria benefits for sport cards

Creative Allowance of 1000 PLN gross/month

Home office setup reimbursement

Personal Learning & Development Budget of 1500 USD/year

26 days of annual leave/year

2 Mental health days off/year

Job summary

LumApps SAS in Kraków is seeking a Security Engineer responsible for optimizing the security detection stack. You will handle security events, automate detection logic, and ensure security configurations are managed as code.

The ideal candidate has 3+ years of experience in application and cloud security, with hands-on expertise in AWS/GCP and Kubernetes. Benefits include a creative allowance, private healthcare, and extensive leave policies.

Qualifications

• 3+ years of professional experience in application/cloud security.
• Ability to analyze WAF traffic and cloud telemetry to identify attack patterns.
• Hands-on experience applying security best practices in cloud environments.
• Strong understanding of application and API security principles.
• Practical experience with source code analysis in Python and/or Java.
• Experience integrating security tools within CI/CD pipelines.
• Solid understanding of encryption techniques and secure data handling.
• Knowledge of network protocols and security concepts.

Responsibilities

• Maintain and monitor automated security setups and triage findings.
• Coordinate the tracking of security incidents to ensure timely resolution.
• Promote secure coding practices and review third-party components.
• Manage recurring security review processes and risk assessments.
• Apply security best practices to the organization's AI usage.
• Support security awareness training and participate in knowledge-sharing sessions.

Skills

Application / Cloud Security

WAF Traffic Analysis

AWS/GCP Security Practices

Kubernetes Security

API Security Principles

Python/Java Understanding

Security Monitoring Tools

Data Security Techniques

Network Protocols Knowledge

Tools

SAST

DAST

SCA Tools

Job description

LumApps is now more than just an Employee Experience Platform — it is an AI-powered Employee Hub that supports companies in their digital transformation of communication, collaboration, and engagement with their customers, partners, and above all their employees.

Our platform is a proven leader in this dynamic market with a truly unique vision and product. It has been deployed by Fortune 500 clients around the world and is delivering meaningful business benefits. LumApps is identified as a leader in Gartner's Magic Quadrant for Intranet Packaged Solutions as well as in Intranets Forrester Wave, and regularly selected for the French Tech Next40/120 program.

In 2025, LumApps strengthened its leadership position by partnering with Beekeeper, a pioneer in frontline employee experience solutions. This strategic collaboration expands our reach and impact across all types of workers — from HQ to the frontline.

Our mission: To make people feel that they belong and have a purpose.

To create an environment where all employees are engaged and work together towards the same goal. Over 700 leading companies trust our solution to:

• Improve the productivity of their teams with our AI-powered Collaborative Experience Platform integrated with both Google and Microsoft collaborative suites
• Transform employees into real ambassadors of their company
• Make employees more efficient and better connected to their peers and relevant information, regardless of their location, with the tools and information they need at their fingertips
• Help companies reduce turnover, accelerate employee onboarding, better collaborate and share knowledge, and even improve their customer experiences

With a team of over 600 Lumies spread across 11 offices (Lyon, Paris, Lille, Sophia Antipolis, London, Barcelona, Hamburg, Austin, Tokyo, Zurich, Krakow), we support large enterprises all around the world. Over the past year, we have been driving an ambitious phase in our journey under the impulse of our new shareholder Bridgepoint, aimed at propelling us to become the clear leader in our market and shine worldwide in our industry. We are looking for individuals who are excited to actively participate in this transformation.

If these core values sound like you: "be bold, do amazing things", "say what you mean, do what you say", "one team, same mission", "always be evolving": apply now!

Mission

This role is responsible for the proactive engineering and technical optimization of the organisation security detection stack. You will take ownership of triaging and investigating security events from GuardDuty, Sysdig, and WAF telemetry, moving beyond dashboard monitoring to perform active troubleshooting via log analysis and direct cluster interaction (with kubectl and gcloud). You will be expected to proactively tune detection logic to reduce false positives and develop automation scripts in Python or Bash to eliminate manual operational tasks. Additionally, you will drive the remediation of GitHub Advanced Security findings by providing developers with actionable code-level fixes and ensuring security configurations are managed as code.

Your Responsibilities

• Security Operations & Tooling: Maintain and monitor automated DAST, SAST, and SCA setups. Triage findings and work with engineering teams to ensure timely resolution of vulnerabilities.
• Incident Response: Participate in the coordination and tracking of security incidents and tickets to ensure resolution within SLAs.
• SDLC Contribution: Collaborate with developers to promote secure coding practices and API security within the Software Development Lifecycle. Review third-party components for vulnerabilities using SCA tools.
• Testing & Assessments: Assist in managing recurring security review processes, including internal penetration testing and risk assessments.
• AI Security: Apply security best practices to the organization's usage of AI and LLM systems, supporting the broader strategy developed by senior leadership.
• Knowledge Sharing: Support security awareness training and participate in internal knowledge-sharing sessions.

What We Look For in You

• 3+ years of professional experience in application / cloud security
• Ability to analyze WAF traffic and cloud telemetry (e.g., GuardDuty, Sysdig) to identify attack patterns, eliminate false positives and tune the tooling.
• Hands‑on experience applying and auditing/remediating security best practices in AWS/GCP, Kubernetes and containerized infrastructure
• Strong understanding of application and API security principles (e.g., OWASP Top 10, OWASP API Top 10).
• Practical experience with source code analysis and the ability to read and understand Python and/or Java.
• Hands‑on experience with security monitoring tools including SAST, DAST, and SCA + practical experience integrating them within the CI/CD pipelines.
• Solid understanding of data security, encryption techniques, and secure data handling.
• Working knowledge of network protocols (TCP/IP, DNS) and security concepts (WAFs, IDS).

Why You’ll Love Working at LumApps

We’re proud to offer a work environment where people feel supported, valued, and empowered. Here’s a peek at what we offer:

• For France: Hybrid work model – 2 days at the office, 3 days remote
• RTT days – ~10 extra days off per year
• Meal vouchers (SWILE) + free snacks & coffee
• Yoga classes - Take a mindful break in our Paris office
• Supportive parental leave and family moments – even a Christmas party for your kids
• Health insurance (ALAN) – 60% covered + full life & disability cover
• Afterworks, team celebrations & seasonal parties
• Equipment of your choice
• French & English lessons, professional development & access to Leeto CSE

For Poland:

• Phone & Home Internet costs reimbursement up to 80 PLN/month
• Private health care package with Luxmed – covered for you and partially for your partner / family
• Cafeteria benefits – monthly budget to cover sport cards or other purchases
• Creative Allowance – paid as 1000 PLN gross/month
• Home office set-up reimbursement up to 1000 PLN
• Personal Learning & Development Budget of 1500 USD/year
• 26 days of annual leave/year and 2 Mental Health days off per year

Benefits listed above are part of the compensation package for contract of employment.

We aim to celebrate diversity and are committed to creating an inclusive environment for all employees. We encourage applications from candidates of all backgrounds, identities, and experiences.