Security Engineer F/H
il y a 1 jour
Paris
🤩 Who we are At MYM, we make no secret of it: we have the ambition to become the leading platform for exclusive content in France and internationally. How? By enabling all Content Creators, through our platform, to guarantee the exclusivity, authenticity and originality of their creations to their users. MYM's Superpowers? • Power to the Creators I Content creators are paid directly by users, for their content, via a paid subscription they manage with complete autonomy, • Authenticity for the Users I By subscribing to their favorite creators, users gain access to exclusive content, shared nowhere else, • An Infinite Range of Possibilities I Photos, Videos, Stories, Lives, Chat… Users and Creators build, through MYM, an exclusive relationship immensely rich in content 🚀 What you will do MYM runs on AWS, serves 19M users, and handles peak loads of 10,000 RPS; security is not a checkbox, it is a core pillar of everything we ship. Reporting directly to Quentin, our CTO, you will own the security posture of MYM end-to-end: from threat detection to offensive testing, from incident response to building the security team. In this role, you will: • Own and continuously improve the SIEM (Sumo Logic), tuning alerts, reducing noise, and ensuring meaningful coverage across all environments., • Lead threat detection and threat hunting, proactively searching for signs of compromise before they become incidents., • Drive incident qualification and response, from triage to resolution; you own the full cycle and run post-mortems to prevent recurrence., • Conduct forensic analysis on suspicious activity across our AWS multi-account, multi-environment infrastructure., • Run offensive security operations, including penetration testing and Red Team exercises, to stress-test our defenses and sharpen our detection capabilities., • Support operational teams in embedding security best practices into their day-to-day workflows and architectural decisions., • Build and maintain a security documentation framework, including standards, runbooks, and incident playbooks., • Grow the security team, contributing to defining who we hire next and how we scale the function. The Challenge in Numbers: • Scale: 19M users, 130k Daily Active Users (DAU), 10,000 RPS at peak, • Infrastructure: AWS-only, multi-account, multi-environment, Kubernetes, • Data: S3, DynamoDB, PostgreSQL on RDS, MongoDB, OpenSearch 👥 Who you will work with You will operate at the intersection of every team at MYM, working closely with back-end, front-end, infrastructure, and product engineers to embed security thinking across the entire organization. As our Security Engineer, you will: • Partner with Quentin (CTO) as your direct manager and strategic sponsor for all security initiatives., • Collaborate with infrastructure and platform engineers on hardening, monitoring, and incident response., • Advise product squads on secure-by-design principles as features are being built, not after., • Act as the internal authority on security standards, reviewing architectures and flagging risks early. 🔭 What we are looking for 🛡️ Security expertise You have at least 3 years of hands-on experience in cybersecurity, covering both offensive and defensive disciplines. You are equally comfortable hunting threats in logs and running a Red Team exercise, and you know how to translate findings into actionable remediation. ⚙️ Technical foundation You have a solid command of AWS security (IAM, GuardDuty, Security Hub, VPC architecture) and know how attackers move laterally in cloud environments. You are proficient with core defensive tooling: EDR, NDR, SIEM (Sumo Logic is a plus). You have experience in forensic investigation and incident response in production environments. 🗣️ Communication & influence Security only works if engineers actually follow it. You know how to make security understandable, non-blocking, and even compelling for technical and non-technical audiences alike. 🫶 What we value Curiosity & Drive: You relentlessly seek the why and how. You read the manual, experiment, and challenge the status quo to find smart, efficient solutions. Accountability: You adopt an Extreme Ownership mindset, believing success is always within your scope of action. You focus solely on achieving results. Positivity & Focus: You maintain an unwaveringly positive attitude. You prioritize finding solutions and opportunities over enumerating obstacles or excuses. Structured Argumentation: You rigorously structure and document ideas, communicating key messages using factual, evidence-based arguments. Collaborative Excellence: You are committed to continuous improvement for yourself and the team, actively learning from all errors to drive collective growth. 🛠️ Technical Stack • Systems: Amazon Linux V2 (CentOS), Ubuntu, Debian, • Storage: S3, DynamoDB, PostgreSQL on RDS, MongoDB, OpenSearch, • SIEM: Sumo Logic, • Monitoring: Grafana / Tempo / Loki / CloudWatch, • Infrastructure: AWS (multi-account, multi-environment), Kubernetes ✨ Why join MYM? • 🚀 A rewarding experience in a dynamic and stimulating environment, within demanding tech teams where every idea matters., • 🏠 1 remote working days per week, • 🏋️ Gymlib membership, Swile meal vouchers 🍽️, AXA health insurance and cutting-edge equipment 💻., • 📚 Regular training programs to keep growing your skills., • 🎉 Great moments with colleagues, afterworks, team breakfasts, and team buildings., • 🏢 Modern, design offices in the heart of Paris 10th district. 📆 Job details • 📅 Start date: Open, • 📍 Location: Paris 10th district, • 📄 Contract: Permanent position (CDI) 🚀 Ready to join the adventure? If you see yourself in this role and want to live a unique experience, join the MYM Team! Recruitment process: • Interview with Omar, our Chief People Officer (30 minutes), • Interview with Quentin, our CTO (1 hour), • Live Case & Cultural Fit with the teams, • Meeting with Gauthier, our CEO (30 minutes)