Sécurité jobs in Issy-les-MoulineauxCreate job alerts

About MistralMistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.The RoleThis role exists to ensure the physical safety, regulatory compliance, and operational resilience of Mistral's HQ.As a member of the global security team, you will shape and execute the HQ's physical security strategy for one of the world’s leading AI companies, directly impacting the protection of employees, assets, and intellectual property. Your work will establish Mistral's HQ as a benchmark for physical security in the tech sector, enabling business growth while mitigating risks in a cutting-edge, AI-driven environment.You will own the end-to-end physical security framework—from access control and surveillance to crisis response—collaborating closely with French authorities (Police, Gendarmerie, ANSSI) and internal stakeholders. This is a unique opportunity to build a scalable, compliant, and innovative security model that sets the standard for Mistral's expansion across Europe.What You Will DoDefine and implement a unified physical security strategy for Mistral AI’s France facilities, aligning global policies with local regulations.Lead the consolidation and management of security vendors under SLAs, ensuring performance, cost-efficiency, and compliance.Establish a regulatory compliance program to achieve 100% adherence to French/EU laws (CNIL, RGPD, NIS2) and industry standards (ISO 27001/28000).Deploy state-of-the-art security technologies, including AI-powered surveillance, access control, and intrusion detection systems.Develop and test crisis response frameworks, including emergency protocols for evacuations, lockdowns, and high-impact incidents.Formalize liaison protocols with French authorities to enable threat intelligence sharing and collaborative security measures.Optimize the France security budget (1M–3M/year) through vendor consolidation, efficiency gains, and risk-based prioritization.Measure and report on security performance, ensuring zero major incidents and continuous improvement of safety standards.What we are looking forProven experience designing and implementing physical security programs for large, high-stakes facilities or multi-site operations.Vendor management expertise with a track record of consolidating, negotiating, and optimizing security service contracts (e.g., guard services, CCTV, access control).Crisis leadership with hands-on experience developing and testing emergency response protocols for incidents like protests, cyber-physical threats, or natural disasters.Deep knowledge of French/EU compliance frameworks (CNIL, RGPD, NIS2, ISO 27001/28000) and a history of leading audits or certifications.Builder mentality—thrives in ambiguous environments, turning strategy into scalable, operational security solutions.Data-driven decision-making—uses KPIs, risk assessments, and metrics to continuously improve security posture.Resilience under pressure—maintains clarity and effectiveness in high-stakes, fast-evolving situations.Uncompromising integrity—upholds the highest ethical standards, ensuring confidentiality and trust in sensitive contexts.What We OfferWe offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.For the most up-to-date details on benefits available in your location, please refer to our Benefits page.Privacy PolicyYour privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.LocationParisEmployment TypeFull timeDepartmentHuman Resources

VOTRE RÔLE ET VOS MISSIONSLe security leader est le représentant de la sécurité du SI, rattaché au département gestion du risque cyber de la DSSI AXA France il met en œuvre un accompagnement sécurité de haut niveau sur les projets IT en construisant une relation forte avec les équipes métiers.Le security leader en charge des filiales :- Assure la représentation de l'activité Information Sécurity in Project dans les instances de gouvernance ou il intervient en présentant les indicateurs sécurité du périmètres et en construisant les messages associés- Travail en interaction avec les autres équipes DSSI intervenant sur le périmètre des filiales (sécurisation de l'infrastructure, pentest).- Assure la supervision, le contrôle et le conseil cyber aux RSSI locaux des filiales en mesurant notamment la maturité des pratiques ISP et en vérifiant la bonne application de la politique de sécurité AXA France- Porte et dimensionne l'offre AXA France ISP (Information Security in Project) à destination des filiales sans RSSI locaux, construit et valorise les indicateurs associés.- Anime les deux consultants cyber en charge des analyses sécurité et de due diligence des sous traitants pour le compte des filiales sans RSSI locauxVOTRE PROFILDe formation supérieure, vous disposez de plus de 10 d’expérience en cyber sécurité. Vous êtes un très bon connaisseur de l’IT et de la cyber sécurité avec une expérience avérée sur l’activité de conseil sécurité dans les projets IT (ISP).Vous avez un bon relationnel, une capacité à convaincre et à faire adhérer vos interlocuteurs, de la rigueur dans le formalisme et le suivi, ainsi que la capacité d’apprendre des notions/technologies nouvelles.POURQUOI NOUS REJOINDRE ?Nous sommes persuadés que pour bien prendre soin de nos clients, nous devons commencer par bien prendre soin de nos collaborateurs ! Les avantages que nous proposons à nos salariés sont nombreux.Nous choisir, c’est bénéficier par exemple :D’un package de rémunération complet comprenant un salaire fixe, un complément de rémunération variable, des primes, de la participation et de l’intéressement, la possibilité d’acquérir des actions AXA, ou encore des solutions d’épargne avantageuses ;D’un cadre de travail flexible jusqu’à 3 jours de télétravail possible par semaine (selon profil du poste), des tickets restaurant pour les jours télétravaillés ou encore une participation à l’achat d’un écran ou fauteuil ergonomique ;D’une politique visant à concilier vie personnelle et vie professionnelle avec 28 jours de congés payés, entre 14 et 16 RTT selon les années, des formules de travail à temps partiel ou encore des jours d’absence rémunérées pour la rentrée scolaire ou un déménagement par exemple ;De la possibilité de s’engager pour une cause qui vous tient à cœur grâce à nos associations telles que AXA Atout Cœur, AXA Compétences Solidaires ou encore AXA Prévention ;Et bien plus encore ! Perspectives de développement des compétences et de carrières immenses, CE, conciergerie, offres privilèges, soutien en cas d’épreuve personnelle…On s’arrête là, la liste est longue ! ðVOTRE ENVIRONNEMENT DE TRAVAILNotre raison d’être chez AXA ? Chaque jour, nous agissons ensemble pour le progrès humain en protégeant ce qui compte dans + de 50 pays. Accompagner près de 95 millions de clients à chaque étape de leur vie, une mission qui donne le sourire et envie de se lever le matin à nos employés et agents (+ de 145 000 dans le monde !)Chez AXA, nous sommes riches de nos singularités et accueillons tous les profils dans leur diversité. Au-delà de mener une politique inclusive engagée, nous agissons au quotidien en tant qu’employeur citoyen et responsable pour des causes sociétales & environnementales. Ces ambitions vous parlent ? Alors rejoignez un des leaders de l’assurance et venez changer le monde avec nous !Présente sur l'ensemble du territoire, AXA France se distingue comme la filiale la plus importante du Groupe en termes de chiffre d'affaires et d'effectifs. Leader sur les marchés de l'assurance, de la santé et de la prévoyance, l'entreprise offre à ses équipes un cadre de travail moderne et agréable en "smartworking".Vous hésitez encore ? Sachez que nous avons conçu un dispositif d'intégration baptisé "Welcome@AXA" pour accompagner vos premiers pas parmi nous avec attention. En lien avec nos engagements, nous célébrons chaque arrivée en agissant en faveur de la reforestation mondiale : depuis 2020, nous plantons un arbre pour chaque recrutement. Alors, prêt à postuler ?

As Engineering Manager for Code Security, you'll lead a team of engineers building Infrastructure as Code and Secrets protection - one of the fastest-growing areas inside Datadog's security business, with a strong roadmap and real customer problems to solve. You'll partner closely with Product Management and User Experience to shape how the team delivers, stay hands-on with the technical work, and bring AI deeply into how your engineers build. The organization is still young, which means real room to shape its direction and grow into broader scope as it does.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You'll Do:Lead and grow a team of engineers building Datadog's Infrastructure as Code and Secrets security productsOwn the team's roadmap, staffing, and delivery, partnering closely with Product Management and User ExperienceStay hands-on: contribute to code review, weigh in on design decisions, and participate in the on-call rotationBring AI deeply into how the team builds, from adopting agentic coding tools to rethinking workflows around themCoach engineers at every level, giving direct feedback and helping them grow their scope and careersKeep the team's projects and programs organized as priorities shift across a fast-growing areaWho You Are:You've managed software engineers for 2+ years, with a track record of shipping through your teamYou bring a strong technical background you can draw on in day-to-day roadmap and design conversationsYou're comfortable staying close to the work - reviewing code and unblocking technical decisions alongside your teamYou've integrated AI agents into how you and your team deliver code, not just experimented with themYou keep projects and programs organized, even as priorities and scope shiftNice to Have:Background in security, ideally with depth in code securityExperience in customer-facing conversationsDatadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you're passionate about technology and want to grow your skills, we encourage you to apply.Benefits and Growth:New hire stock equity (RSUs) and employee stock purchase plan (ESPP)Continuous professional development, product training, and career pathingIntradepartmental mentor and buddy program for in-house networkingAn inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)Access to Inclusion Talks, our internal panel discussionsFree, global mental health benefits for employees and dependents age 6+Competitive global benefitsBenefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.#LI-HybridAbout Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

Who we areHelsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards. As democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously. We are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers. We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications. The roleAs Security Manager for Helsing France, you will safeguard the integrity of the capabilities we deliver to our customers, ensuring every product and programme meets national and international security requirements, including at classified level. You will act as the focal point for coordinating Helsing's security resources across French teams, working in close partnership with the DGA and other national authorities to secure accreditation for sensitive infrastructure. This role sits at the intersection of technical delivery and regulatory compliance, translating complex requirements under IGI 1300 and II 901 into practical, auditable processes that protect both our people and our mission. Your work will directly enable Helsing to operate securely within one of Europe's most demanding defence environments.The day-to-dayDesign, implement and operate security standards including ISO 27001 and applicable French national frameworks, embedding compliance into everyday deliveryCoordinate the accreditation (homologation) of sensitive infrastructure with the DGA, preparing homologation files, conducting risk analyses and managing external security audits and penetration testsManage the security officer function for Helsing France, overseeing security clearances (habilitations), Security Aspect Letters (Plans Contractuels de Sécurité) and compliance with IGI 1300, II 901 and IM900Build and maintain working relationships with stakeholders, suppliers and subcontractors, ensuring contractual security requirements are met across every engagementDevelop and test incident response, business continuity and crisis management plans, strengthening Helsing's resilience against evolving threatsDeliver security awareness and training programmes that embed a strong security culture across the French entityShape Group-wide security policies and contribute to cross-functional security projects spanning multiple European teamsYou should apply if youHave developed and applied security expertise across complex, regulated environmentsHave successfully delivered security or compliance projects from initiation through to completionHold a recognised qualification or certification in a security-related field, or demonstrate equivalent hands-on expertiseUnderstand French and international security regulations, including the handling of classified information under IGI 1300, II 901 and IM900Are familiar with Information Security Management Systems such as ISO 27001 or the NIST Cybersecurity FrameworkCommunicate clearly and build effective relationships with diverse stakeholders, including customers and government or military counterpartsNote: We operate in an industry where women, as well as other minority groups, are systematicallyunder-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.Nice to HaveExperience working within a defence, government or other highly regulated environmentFamiliarity with NATO or EU classified information frameworksFluency in French and English, enabling clear communication with national authorities and international teamsExperience coordinating penetration tests or technical security auditsUnderstanding of GDPR and its intersection with national security requirementsExperience contributing to ISO 27001 certification or surveillance auditsJoin Helsing and work with world-leading experts in their fields Helsing’s work is important. You’ll be directly contributing to the protection of democratic countries while balancing both ethical and geopolitical concernsThe work is unique. We operate in a domain that has highly unusual technical requirements and constraints, and where robustness, safety, and ethical considerations are vital. You will face unique Engineering and AI challenges that make a meaningful impact in the worldOur work frequently takes us right up to the state of the art in technical innovation, be it reinforcement learning, distributed systems, generative AI, or deployment infrastructure. The defence industry is entering the most exciting phase of the technological development curve. Advances in our field of world are not incremental: Helsing is part of, and often leading, historic leaps forwardIn our domain, success is a matter of order-of-magnitude improvements and novel capabilities. This means we take bets, aim high, and focus on big opportunities. Despite being a relatively young company, Helsing has already been selected for multiple significant government contractsWe actively encourage healthy, proactive, and diverse debate internally about what we do and how we choose to do it. Teams and individual engineers are trusted (and encouraged) to practise responsible autonomy and critical thinking, and to focus on outcomes, not conformity. At Helsing you will have a say in how we (and you!) work, the opportunity to engage on what does and doesn’t work, and to take ownership of aspects of our culture that you care deeply aboutWhat we offerCompetitive salary and VSOP optionsRelocation support: up to 2,500 and 4 weeks temporary accommodationLearning: 500/450 yearly allowanceHealth & wellness: gym membership and mental health support (Nilo.health)Social: regularly company events and monthly social allowancesEnhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to workThese are the core benefits across all locations, there may be additional benefits in certain locations.Helsing is an equal opportunities employer. We are committed to equal employment opportunity regardless of race, religion, sexual orientation, age, marital status, disability or gender identity. Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.Helsing's Candidate Privacy and Confidentiality Regime can be found here.

About Datadog:We're on a mission to build the best platform in the world to defend the enterprise from code-to-cloud-to-runtime. Used by thousands of companies globally, Datadog security products uniquely leverage Datadog's unified security and observability platform so Security, DevOps and SRE can collaborate rapidly and seamlessly to deliver better detection, prioritization and remediation. Our product and engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way.The Opportunity:In this competitive market, the Director of Product Management for Cloud Security and Platform will play a mission-critical role in providing product and strategy leadership to grow Datadog's market share through differentiation, innovation and compelling customer value. This leader will work with a talented and growing team of product managers and engineers to build and grow multiple product lines that play an essential role for our customers' cloud security programs and the shared platform capabilities supporting all Datadog security products, to establish Datadog as a security industry leader.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You'll Do:Run and grow multiple product lines to meet revenue and business targets with the goal of building a multi-hundred million dollar annual business.Lead and own product strategy and roadmap for accountable security product lines, fully aligned to revenue and business goals and with compelling differentiation and customer value.Ensure predictable roadmap execution across direct and partner teams to achieve product and business outcomes required to meet the revenue and business goals.Analyze and develop pricing and packaging strategies to maximize revenue through attaching deep understanding of market dynamics and other strategic leverage points.Drive GTM strategy with GTM partner teams to achieve revenue and business goals.Fulfill the role as the product-leader representative across accountable product lines with analyst, press and customer communities.Manage and grow both manager and individual contributor (IC) Product Managers, ensuring they are motivated, delivering high quality work and finding high fulfillment.Model and contribute to a culture of learning and collaboration across product management and the broader organization.Raise the bar of PM leadership through leadership in strategy development, roadmap planning and execution, GTM and overall product-leader responsibilities.Who You Are:An experienced leader in Product Management with demonstrated business growth and customer adoption success in the CNAPP market, as well as demonstrated experience driving shared platform capabilities in service of multiple products.A seasoned team leader with experience directly managing product management teams and mentoring talent into sustained high performers.Passionate about GTM and have demonstrated success in developing GTM programs and achieving GTM targets with counterparts in sales, sales engineering, channels, marketing and customer success.Excellent at cross-functional alignment and ensuring all partner organizations are fully aligned and committed to delivering what is needed to achieve roadmap and business goals.Highly skilled in pricing and packaging strategies to maximize revenue potential and strategic advantage.Highly customer-centric and a convincing champion of the needs of the customer to deliver a compelling, high value and high quality customer experience across all phases of the customer lifecycle.Previously a software engineer, security engineer or have demonstrated technical knowledge to be able to discuss technical concepts with customers and engineering counterparts.A compelling presenter with excellent verbal and written communication skills with a proven track record of presenting and defending your ideas to executive, technical and non-technical audiences, as well as external audiences including industry analysts.Highly data-driven with an advanced analytical aptitude that can draw critical insights through synthesizing market, competitive, usage, pipeline and other data sources.Datadog values people from all walks of life. We know not everyone will meet all the above qualifications on day one. That's okay. If you're passionate about technology and want to grow your experience, we encourage you to apply.Benefits and Growth:Work on industry-leading cloud security products that protect organizations at global scale.Lead highly talented product management teams solving complex technical challenges.Partner with world-class engineering and go-to-market organizations.Influence company strategy and the future direction of Datadog's security platform.Grow your leadership through meaningful ownership, mentorship, and cross-functional collaboration.Contribute to an inclusive culture focused on learning, innovation, and customer impact.Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.About Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

Imaginez, transformez et impactez le mondepositivement : venez vivre au cœur du changement en tant qu’Architecte ou Expert technique spécialisé dans les problématiques de sécurité des identités digitales humaines et non humaines.Dans ce cadre, nous recherchons un Architecte ou Expert technique afin d’intégrer nos équipes Identity Security. Vous serez amené à contribuer activement aux différentes missions en cours tout en participant au développement de nos capacités sur cette ligne de services. Vos responsabilités seront multiples, mais les principales seront les suivantes : En tant que membre de l’équipe Identity Security, vous serez amené à : Participer aux différentes phases des projets IAM (Identity & Access Management), depuis la définition des besoins jusqu’au maintien en condition opérationnelle des solutions. Être garant tout au long du projet de l’avancement et de la qualité des livrables techniques fournis. Animer des ateliers (cadrages fonctionnels et techniques, architecture, définition des solutions), avec les clients et les équipes internes. Accompagner les clients dans l’analyse de leurs besoins et exigences fonctionnelles et techniques. Définir l'architecture fonctionnelle et technique des solutions d'IAM, incluant : Identity Governance and Administration (IGA) : gestion des identités, cycle de vie des identités, provisioning, workflows, modèles de rôles. Privileged Access Management (PAM) : gestion des accès privilégiés, sécurisation des comptes sensibles, contrôle des sessions. Access Management (AM) : authentification, contrôle d’accès, fédération d’identités, gestion des accès aux applications. Accompagner des équipes IT ou Business pour l'intégration de leurs solutions IAM (On-prem ou SaaS). Accompagner dans la montée en compétences les consultants et analystes plus juniors. Mettre à profit votre expertise fonctionnelle et technique dans le domaine afin d'assister ponctuellement divers projets. Participer au développement de l’offre IAM et à l’élaboration des propositions commerciales d’un point de vue technique. Collaborer avec un vaste écosystème d’experts Accenture à travers le monde et de partenaires technologiques dans un but de partage et capitalisation de l’expertise. #LI-EUProfil recherché : Les transformations de l’Identité Digitale nécessitant autant de penser la gouvernance, les processus fonctionnels et organisationnels, que les mises en œuvre technologiques, les équipes projets se doivent d’être multidisciplinaires. A ce titre, nous recherchons des profils ayant une appétence pour les thématiques IAM et une capacité à évoluer dans un environnement multidisciplinaire. Expérience : De formation supérieure BAC+5, avec une maîtrise du Français et de l’Anglais. 5 ans minimum d’expérience IAM dans un grand groupe (cabinets de conseil, client final) ou dans une société spécialisée en IAM. Compétences : Maîtrise des concepts IAM tels que la gestion des identités, les accès privilégiés, les modèles de rôles, les standards IAM modernes (SCIM, SAML, OAuth, etc.), et les mécanismes de fédération d’identités. Compétences techniques et fonctionnelles pointues dans les domaines IGA, PAM, et AM. Expertise éprouvée sur une ou plusieurs solutions IAM : SailPoint, CyberArk, Okta, Saviynt, Active Directory, Entra, Ping/Forgerock, Wallix. Compétences ou appétence pour le développement (Java, Python, DevOps) et/ou le scripting (PowerShell). À l’aise avec les environnements technologiques variés (Unix/Linux, Windows, infrastructures on-premise et cloud). Bonne connaissance des projets d’intégration et des thématiques globales adressées (infrastructures on-premise et cloud, systèmes d’exploitation, scripting, réseau, haute disponibilité, supervision, …). Expérience avérée dans la conduite de projets IAM en environnement Agile, avec une capacité à collaborer efficacement au sein d’équipes pluridisciplinaires. Qualités : Excellent sens de la communication et capacité à travailler en équipe. Forte curiosité, autonomie et proactivité. Aisance relationnelle et rédactionnelle, ainsi qu’un esprit de synthèse et d’analyse vous permettront de vous intégrer efficacement au sein d’Accenture Security. Sens de l’organisation, avec une capacité à gérer des priorités multiples dans un environnement dynamique. Esprit analytique et orienté solutions, avec une aptitude à prendre du recul pour une vision globale. Capacité à travailler dans un environnement multi-offres et avec des équipes pluridisciplinaires. A propos de nous: Accenture, c'est une communauté de plus de 730 000 talents et une mission commune: réaliser la promesse technologique alliée à l’ingéniosité humaine. Dans un monde en perpétuel changement, nous accélérons la transformation des plus grandes entreprises,de la stratégie à la réalisation des projets, à l’aide des technologies de demainet dynamisons leur croissance grâce à l'expertise multi-sectorielle de nosexperts. Vous construisez une carrière agile, grâce à la formation, aux certifications et aux feedbacks reçus pour chacune de vos réalisations. Nos équipes apprennent chaque jour avec les meilleurs experts en France et à l’international. Vous évoluez dans un environnement de travail flexible qui vise à favoriser l’équilibre entre vie professionnelle et vie personnelle : le télétravail donne la possibilité d’adapter son rythme professionnel en fonction des actualités de l’équipe et du projet. Nous vous proposons de vivre l’expérience du changement auprès de nos équipes, rejoignez Accenture. Et si vous échangiez directement avec nos collaborateurs?Posez-leur directement vos questions. Nos recrutements sont fondés sur les compétences, sans distinction d’origine, d’âge, ou de genre et tous nos postes sont ouverts aux personnes en situation de handicap. About AccentureAccenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360 value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360 value we create for our clients, each other, our shareholders, partners and communities.Visit us at Déclaration d'égalité des chances en matière d'emploiNous pensons que personne ne devrait être discriminé en raison de ses différences. Toutes les décisions d'embauche doivent être prises sans distinction d'âge, d'origine ethnique, de croyance, de couleur, de religion, de sexe, d'origine nationale, d'ascendance, de handicap, de statut d'ancien combattant, d'orientation sexuelle, d'identité ou d'expression de genre, d'informations génétiques, de statut matrimonial, de citoyenneté ou de tout autre critère protégé par la loi applicable. Notre riche diversité nous rend plus innovants, plus compétitifs et plus créatifs, ce qui nous permet de mieux servir nos clients et nos communautés.SummaryLocation: Paris; LilleType: Full time

JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward. We are looking for an Account HSSE Advisor (Client Account(s) – 100% FMNA BU (Domiciled France)About JLLWe are JLL & as of early 2025, JLL is a leading global commercial real estate and investment management company with a history spanning over 200 years. JLL is a Fortune 500 company with annual revenue of $23.4 billion in 2024, operations in over 80 countries, and a global workforce of more than 112,000 employees. The company manages $89 billion in assets and operates over 330 corporate offices worldwide. JLL is recognized for its investment-grade credit ratings and manages 2.2 billion square feet of space through its Workplace Management division.The company is driven by its purpose to shape the future of real estate for a better world, leveraging advanced technology, sustainability, and a unique One JLL culture centred on teamwork, ethics, and excellence. JLL is the brand name, and a registered trademark, of Jones Lang LaSalle Incorporated. For further information, visit jll.com, a leading global commercial real estate and investment management company,If you’re looking to step up or diversify your career, JLL is the perfect professional home. At JLL, you’ll have a chance to innovate with the world’s leading businesses, put that expertise into action on landmark projects, and work on game-changing real estate initiatives. You’ll also make long-lasting professional connections through sharing different perspectives, and you’ll be inspired by the best. We’re focused on opportunities and want to help you make the most of yours.Achieve your ambitions – join us at JLL!Role PurposeAs a HSSE Advisor supporting the accounts that sit within the FMNA Business Unit, you will be responsible for supporting the EMEA HSSE Lead for one of JLLs Workplace Management multi-account business units, the most important objective of this role will be ensuring that our clients, our employees and sub-contractors return home safely at the end of their working day and that JLL, and our client, remain compliant with all legal and other requirements.The client portfolio is located across Europe, Middle East, and Africa (EMEA).Within this role & wider tear, you can help shape the future of workplace management for a better world. Our purpose is to create rewarding opportunities, amazing spaces, and sustainable real estate solutions for our clients, our people, and our communities.As a key member of our team, you will play a pivotal role in driving Health, Safety, Security, Environment, and Quality (HSSEQ) excellence across our workplace management portfolio. At JLL, we are committed to leveraging advanced technology and the power of our global platform, combined with local expertise, to deliver outstanding results. We seek leaders who embody our HSSEQ leadership behaviours—championing safety, fostering a culture of continuous improvement, and inspiring teams to achieve the highest standards of operational excellence and compliance.If you are passionate about making a positive impact and leading by example in a dynamic, collaborative environment, JLL offers the platform and support to help you achieve your ambitions and see a brighter way, We employ more than 600 HSSE specialists across our Workplace Management business; Our primary areas of safety focus are in our Facilities Management and Project & Development Services. Until now, our HSSE management has been built around local and regional structures. However, with the increasing globalization of our client base, we are now seeking to centralize our HSSE teams and create a strong HSSE platform, to provide strategic and operational direction for our HSSE performance and drive the global consistency and excellence our clients and shareholders demand and our people deserve.The role is to be highly visible; client-facing and the work is fast-paced. The successful candidate must ensure that critical stakeholders, such as employees and clients, receive timely, relevant information and appropriate counsel for all HSW Matters. You must have an acute eye for HSW risk and be able to foster a strong culture of health and safety and deliver world class HSW results, improved productivity, and flawless execution.As a member of the JLL Work Place Management HSSE team and wider vertical, they will support the implementation of the JLL HSSE strategy, and the role reports directly to the Supervisory org of the JLL Work Place Management HSSE Cluster Senior Director for the UK & Ireland and Group Accounts Business Partner, but day to day line management reporting and accountability will be into the FMNA BU HSSE EMEA Lead, with regular reporting on HSW performance across the account to the Account Leadership team and the Client Safety team as directed by the account operational leadership.Other key stakeholders include the account(s) HSW team, regional Operations leads, account country leads, Risk & Compliance, Sourcing & Procurement, Business Information Team, JLL Technology and JLL’s partners who are responsible for execution of the services.What this job involvesPerformanceSupport the EMEA HSSE Lead with the Implementation of JLL WD HSSE strategic objectives, in line with Client HSW programs, and bring them to life for the accounts, within the FMNA BU ensuring effective operational relevance.Support the EMEA HSSE Lead on their deliverables for the BU focusing on the management and reduction of operational risks across the accounts by providing guidance and advice on health and safety risk management at all levels and in accordance with the agreed Client Scope of Work.Provide technical advice on relevant HSW issues and communicate notifications of changes in legislation that will impact service delivery and/or client occupancy, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Ensure a continued working knowledge of relevant current legislation.Identify transformational improvement opportunities and support the account team in identifying practical cost-effective solutions and controls for HSW risks and opportunities with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Ensure that both JLL, and the Client, remain compliant with legal and other requirements with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Ensure that records are in place in line with legal requirements and Client Risk Control Standards with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Manage the collection of data and information, its analysis, and relevant outputs to enable the Client and JLL stakeholders to have clear visibility of the compliance status across the portfolio with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Organize, implement, and maintain effective communications with all stakeholders with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Be the HSSE representative for several of the accounts with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Each month present your stats for the accounts you are supporting, example: wins/challenges/opportunities to the HSSE BU EMEA FMNA Lead.LeadershipFoster a ‘One Team S.A.F.E.R. Together’ culture on the account.Support account HSW team members in developing relationships with key internal and external stakeholders.Proactively develop and manage client relationships ensuring expected service levels are achieved. This will include participation in the Clients HSW leadership meetings with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Deliver an exceptional quality of service to the Client, as reflected by client feedback.Embed JLL WD HSSE requirements and meet client requirements and standards.Establish effective relationships and work co-operatively with the Account Teams, supply chain partners, and 3rd party vendors, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Contribute to the JLL Workplace Management HSSE program as an advisor reporting into the HSSE account lead and the global HSSE leadership team.Ensure 3rd party vendors always maintain compliance with JLL and Client HSSE Standards, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.StandardsSupport with the implementation and maintenance of JLL Global HSSE operational controls, (i.e., process, standards, procedures, and guidelines) and Client HSW programs and processes, ensuring compliance with obligations and Client aspirations, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Identify and align JLL HSSE practices to Client HSW standards and requirements, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Drive best practice HSW training programs and resources, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Oversee the successful delivery of HSW regulatory responsibilities and best practices globally to secure regulatory compliance, including management of change related to new and revised legislation, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.Oversee the successful management of assurance for the HSW program JCAP, while supporting growth strategies related to Client, JLL and/or national and industry standards, with an umbrella of governance from the HSSE BU EMEA FMNA Lead.To apply you need to be / have:The CandidateExperiencePreferred relevant HSSE management experience within Operational Management systems and working with corporate clients.Experience in HSSE for multiple sites across multiple countries with a strong understanding of the HSE regulatory environment in major markets.Appropriate recognized Professional HSSE qualifications, such as NEBOSH General Certificate or equivalent as a minimum and memberships for a JLL P2 grade HSSE Advisor. Certified to operate as a HSSE professional.Management system knowledge, desired, but not essential, implementation and auditing experience.Experience in working with a multi-cultural team of HSSE professionals.Practical working knowledge of up-to-date tools and techniques within a real estate environment and management of risk across a complex multi-site property portfolio.Significant practical experience of problem solving HSSE issues in a dynamic/diverse environment and implementation of risk control systems and processes.An agile approach to leadership and stakeholder management – able to operate effectively in a matrix structure.A strong orientation to goals and measurable results.Excellent communication skills to appropriately coach and educate at all levels of the account.A willingness to travel is a must!Other Personal CharacteristicsPositive, proactive, energetic approach to safety management.Evidence of strong interpersonal skills to establish credibility with colleagues and senior management and to foster effective working relations with a wide range of senior internal, client and external contacts.Influencing/negotiation skills with the ability to adopt different styles depending on the circumstances.Knowledge and understanding of Internationally recognized HSSE Management systems.Ability to identify measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.Strong cultural awareness: unwavering ethical standards; drives excellence and innately collaborative. Understands how to be effective operating across geographies and cultures.Must be able to proactively manage responsibilities and work commitments independently.Always be curious and share your ideas.What you can expect from usYou’ll join an entrepreneurial, inclusive culture. One where we succeed together – across the desk and around the globe. Where like-minded people work naturally together to achieve great things.Our Total Rewards program reflects our commitment to helping you achieve your ambitions in career, recognition, wellbeing, benefits and pay.Join us to develop your strengths and enjoy a fulfilling career full of varied experiences. Keep those ambitions in sight and imagine where JLL can take you...JLL is an Equal Opportunity EmployerApplicants are considered regardless of race, color, religion, creed, age, sex, pregnancy, family responsibility, national origin or ancestry, citizenship, marital status, sexual orientation, transgender status, veteran’s status, genetic information, or status as a qualified individual with a disability or any other protected characteristic in accordance with applicable law.Our unique culture has been recognized by industry experts and our peers. We are: World’s Most Ethical Companies from Ethisphere Institute for seven consecutive years America’s 100 Most Trustworthy Companies from Forbes magazine #1 Top Corporate Real Estate Firm from Watkins Research Group, Inc. for six consecutive years A LinkedIn "Top Company: Where the World Wants to Work Now"A Working Mother “Top 100” companyA “best company to work for” in multiple locations around the globe, including Chicago, San Francisco, London, Ireland, Shanghai and Hong Kong For further information, visit jll.com. Location: Remote –Paris, FRAIf this job description resonates with you, we encourage you to apply even if you don’t meet all of the requirements. We’re interested in getting to know you and what you bring to the table!At JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyze your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you're pursuing.JLL Privacy NoticeJones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely.For more information about how JLL processes your personal data, please view our Candidate Privacy Statement.For additional details please see our career site pages for each country.Jones Lang LaSalle (“JLL”) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process – including the online application and/or overall selection process – you may email us at HRSCLeaves@jll.com. This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL.SummaryLocation: Paris, FRAType: Full time

DescriptionEn tant que Staff chez Matera, tu contribues à définir la vision technique et à l'appliquer : tu fixes les standards, tu améliores la DevX, tu inities les chantiers structurants pour qu’on construise un produit de meilleure qualité et avec une meilleure vélocité et qu’on garantisse sa sécurité. Ton impact se mesure à l'échelle de l’entreprise.Concrètement, tes missions seront :Identifier et diriger des chantiers pour faire évoluer nos pratiques de sécurité dans toute l’entrepriseFormer les collaborateurs aux enjeux principaux de cybersécuritéConduire des pentesting sur nos applications afin d’identifier des vulnérabilitésTravailler avec les squads afin de remédier aux vulnérabilités et améliorer nos pratiques de code en vue d’une meilleure sécuritéMonitorer nos applications avec une stack moderneMentorer les devs de tous niveaux afin d’élever le niveau collectifContribuer à la vision technique globale aux côtés du CTO et des autres StaffsNotre stack : Frontend : React, Typescript, React Native (mobile), Jest, Playwright, MaestroBackend : Ruby on Rails, Sidekiq, Rspec, CucumberData : PostgreSQL, Opensearch, RedisInfrastructure : Kubernetes, Terraform, Grafana, Loki, Tempo, PrometheusNotre organisation : Squads autonomes – Des squads de 5 devs avec un EM, responsables de la maintenance de leur domaine de bout en bout, mais amenées à intervenir sur des domaines très différents pour la création de nouvelles features.IA-first – 100% du code est généré par IA via Cursor et un orchestrateur de plans intégré au repo. Ce n'est pas un bonus, c'est notre façon de travailler. On attend de toi que tu maîtrises ces outils et que tu saches en tirer le meilleur.Intelligence collective – Les devs rentrent tôt dans la réflexion produit. Force de proposition est une attente, pas un bonus.Pragmatisme & efficacité – Méthodologie proche du Kanban. On livre, on apprend, on améliore.Flexibilité – Horaires souples, remote possible avec 2 jours de présence bureau par semaine.Adaptabilité – Notre métier évolue vite, et notre organisation avec. Tu dois être à l'aise avec le changement, voire le chercher — quelqu'un que la nouveauté stimule plutôt qu'elle ne déstabilise.Les avantages :Rémunération : à partir de 88 000 selon profil et expérience,Localisation : Paris, Lyon, Annecy, Bordeaux, Marseille, ToulouseContrat : Cadre forfait jourTélétravail : 2 jours de présence au bureau par semaineOnboarding & évolution : 2 semaines d'onboarding pour comprendre le fonctionnement et les valeurs de Matera, et un onboarding spécifique à ton métier,Career path structuré : accompagnement hebdomadaire par ton·ta manager, performance review annuelle, mobilité interne encouragéePolitique de rémunération transparente en interne.Qualité de viePolitique d’accompagnement à la parentalité : une reprise en douceur à 80% pendant 4 semaines (payées à 100%), ainsi que 5 jours de congés supplémentaires par an pour enfant malade,Temps de Trajet Responsable (TTR) : 1 jour de congé payé supplémentaire par an pour privilégier les transports responsables pour te rendre sur ton lieu de vacances,Congés menstruelsSport : accès à WellPass pour faire du sport à petits prix,Des bons plans culture avec la plateforme Leeto (réductions cinéma, musées, parcs d'attraction...).Base légaleCongés payés et RTTMutuelle & Carte Swile - pris en charge à 50%Prise en charge de la prévoyance à 100%Prime vacances (SYNTEC)Prise en charge des transports à 50%Un ordinateur et équipements te seront fournisRequirements8+ ans d’expérience en security engineering, avec une expertise solide en sécurité applicative, cloud et architecture, et une capacité démontrée à définir des standards, influencer des équipes engineering et réduire les risques sur des systèmes complexes.Au-delà de l'expérience, ce qu'on cherche vraiment :Une vision technique long terme. Tu sais où tu veux emmener une codebase dans 1 à 3 ans. Tu as un plan, tu le défends, et tu le mets en œuvre — en découpant les chantiers complexes en itérations déléguables plutôt qu'en faisant tout toi-même.La capacité à faire évoluer les standards. Tu ne te contentes pas d'appliquer les bonnes pratiques, tu les (re)définis. Tu initites des débats qui n'auraient pas lieu sans toi, et tu en fais adopter les conclusions par toute l'équipe.Une vraie autonomie. Tu n'as pas besoin d'être relancé. Tu identifies les problèmes avant qu'on te les signale, tu proposes des solutions, et tu les mènes à bien — parfois sans PM, souvent en impliquant toute l'équipe.L'IA comme outil principal. Tu utilises Cursor et les LLMs au quotidien, tu sais prompter, itérer, et surtout critiquer ce que l'IA produit. Tu ne délègues pas aveuglément.Une posture de leader collectif. Ton travail rend les autres meilleurs. Tu mentores tous les niveaux, tu améliores la DevX, et tu t'assures que ce que tu construis est compris et adopté — pas seulement livré.Un sens du produit. Tu intègres les contraintes business dans tes décisions techniques. Tu comprends l'impact de l'UX sur la qualité perçue et tu t'en soucies autant que de la qualité du code.Bonus pointsExpérience dans la mise en place de certifications (iso 27001)Expérience en Ruby on RailsExpérience avec des produits bancairesCertifications sécuritéProcessus de recrutement : 1️⃣ On étudie ta candidature2️⃣ Call avec Mavrick (Head of Engineering)3️⃣ 2 Entretiens techniques (Algo interview & System Design Interview)4️⃣ Rencontre avec ta future équipeð il faut prévoir 2 semaines pour réaliser le processus de recrutement au complet.À savoir :ð Nous nous efforçons de faire un retour sur ta candidature le plus rapidement possible (sous une semaine). Que le retour soit positif ou négatif, tu recevras un mail de notre part - pense à regarder tes spams au cas où.️ Si tu as besoin de prédispositions particulières pour réaliser les entretiens dans les meilleures conditions, tu peux le notifier lors de ta candidature et en informer l’équipe Recrutement.CategoryTech

We are looking for a Senior Threat Hunter with strong expertise in Python and Jupyter Notebooks to join our Managed Security Services team in Paris.This role combines advanced threat hunting with engineering capabilities, focusing on building scalable, automated, and repeatable threat hunting frameworks across large datasets in enterprise environments.Key ResponsibilitiesPerform proactive, hypothesis-driven threat hunting aligned to MITRE ATT&CKAnalyze and investigate security data across endpoint, network, and cloud environmentsIdentify indicators of compromise, suspicious activity, and emerging threatsDevelop and maintain Jupyter Notebook-based hunting frameworksBuild reusable Python modules, APIs, and automation toolsDesign and maintain data pipelines for telemetry and threat intelligence integrationAutomate hunting workflows using orchestration tools (e.g., Azure ML pipelines)Apply data normalization, validation, and correlation techniquesCollaborate with SOC, Threat Intelligence, and Detection Engineering teamsProduce clear and structured threat hunting reports and findingsRequired Skills & Experience5+ years of experience in Threat Hunting, Detection Engineering, or Incident ResponseStrong hands-on experience with: Python (Pandas preferred)Jupyter NotebooksExperience working with: SIEM / EDR / XDR platformsLarge-scale security telemetry and data analysisStrong understanding of: MITRE ATT&CK framework and attacker TTPsWindows and Linux operating systemsNetwork traffic and log analysisExperience in cloud threat hunting (AWS, Azure, GCP)Good understanding of: CI/CD pipelines, SDLC, and automation practicesPreferred QualificationsExperience with tools such as Microsoft Sentinel, Defender, CrowdStrike, CybereasonExperience building automation for detection validation, rule deployment, or telemetry pipelinesRelevant certifications such as GIAC, OSCP, or CEHWork ModelHybrid role based in ParisPermanent positionCollaboration with global teams

Are you looking for new challenges and personal growth within Coca-Cola Europacific Partners? Then we have a great opportunity for you! Do you have a personality with the power to influence and connect? Can you sustain the pace to keep on growing? Will you make an impact with your desire to win?Director, Cyber Security (CISO)What you'll be part ofAt CCEP, technology and cyber security play a critical role in enabling our business, protecting our people, customers and consumers, and supporting our ambitious transformation agenda.As Director, Cyber Security (CISO), you will lead the strategic direction, development and execution of our enterprise cyber security capability. Reporting to the VP, Service Delivery & Security, you will help shape how CCEP protects its technology landscape across IT, OT, cloud, applications and digital services while supporting innovation and business growth.This is a highly visible leadership role where you will work closely with senior stakeholders across the organisation, providing expert guidance on cyber risk, resilience and security strategy. You will lead a team of security professionals and partner with colleagues across Business Process Technology (BPT) and the wider business to drive a secure-by-design culture and strengthen our overall cyber security posture.If you are passionate about leading high-performing teams, influencing strategic decisions and staying ahead of an evolving threat landscape, this is an opportunity to make a significant impact at a European scale.What you will doAs our Director, Cyber Security (CISO), you will:Lead our cyber security strategyDefine and deliver CCEP's cyber security strategy and roadmap, ensuring alignment with business priorities, technology transformation and emerging threats.Act as CCEP's designated Chief Information Security Officer, providing enterprise-wide leadership and expertise.Advise senior leaders on cyber risk, security investment priorities and strategic decision making.Develop and report meaningful security metrics, risk indicators and maturity measures to executive stakeholders.Strengthen cyber defence and resilienceLead our cyber defence capabilities, including monitoring, threat detection, incident response, crisis management and continuous improvement.Oversee Security Operations Centre capabilities, ensuring effective protection against evolving cyber threats.Lead executive cyber incident response activities during significant security events.Ensure security capabilities protect the confidentiality, integrity and availability of business-critical services and information.Drive security architecture and engineering excellenceChampion secure-by-design principles across technology initiatives and transformation programmes.Define the strategic direction for security architecture, engineering, application security and threat engineering.Oversee the effectiveness and continual optimisation of security platforms, controls and automation capabilities.Provide leadership on the secure adoption of emerging technologies, including AI-enabled solutions.Review and influence technology and solution designs to ensure security requirements are effectively addressed.Enhance governance and risk managementPartner closely with Security Governance & Assurance teams to strengthen risk management, compliance and audit readiness.Support the ongoing effectiveness of security controls, including those supporting SOX and regulatory requirements.Ensure security requirements are embedded across supplier relationships, third-party services and managed service providers.Drive remediation of security risks, control gaps and audit findings.Lead people, partners and investmentBuild, inspire and develop a high-performing cyber security organisation.Create an environment of continuous learning, collaboration and technical excellence.Manage strategic relationships with security suppliers, partners and managed service providers.Oversee cyber security budget planning and investment decisions to maximise business value and risk reduction.Promote security awareness and a strong cyber security culture across CCEP.What we expect from youExperience and qualificationsYou bring significant experience in cyber security leadership within complex, international organisations and have a proven track record of turning strategy into measurable outcomes.You will have:Extensive experience in Cyber Security, Information Security, Technology Risk or related disciplines.Significant leadership experience in senior cyber security roles, ideally including CISO or Deputy CISO responsibilities.A degree in Information Technology, Cyber Security, Information Management, Business Administration or a related field.Professional certifications such as CISSP, CISM, CISA, CRISC, CCSP, ISO 27001, COBIT or equivalent.Experience leading security operations, engineering, architecture, application security, cloud security and operational technology security functions.Proven experience managing large-scale programmes, budgets, suppliers and strategic investments.Strong experience partnering with risk, audit, compliance, privacy and legal stakeholders.Excellent written and verbal communication skills in English.Technical expertiseYou will demonstrate strong knowledge across:Enterprise cyber security strategy and operating models.Security architecture, Zero Trust and secure-by-design principles.Cloud, network, identity, application and OT security.Security operations, threat detection, incident response and cyber resilience.Modern security technologies including SIEM, EDR, XDR, SOAR and vulnerability management platforms.Industry frameworks and regulations such as ISO 27001, NIST, CIS Controls, SOX, GDPR and NIS2.What will help you succeedWe're looking for a leader who can combine strategic thinking with operational excellence and bring others on the journey.You will be:An inspiring and inclusive leader who develops people and builds high-performing teams.A strong influencer who can engage confidently with senior executives and a broad range of stakeholders.Commercially minded, balancing security, risk, cost and business outcomes.Collaborative, culturally aware and comfortable operating across international teams.Resilient, adaptable and able to navigate ambiguity and complexity.Passionate about continuous improvement, innovation and developing a strong security culture.We are Coca-Cola Europacific Partners (CCEP) – a dedicated team of 42,000 people, serving customers in 31 countries, who work together to make, move and sell some of the world’s most loved drinks. We are a global business and one of the leading consumer goods companies in the world. We help our 2.1 million customers grow, and we are constantly investing in exciting new products, innovative technologies and fresh ideas. This helps us to delight the 600 million people who enjoy our drinks every day.From gender, age and ethnicity to sexual orientation and different abilities, we welcome people from all walks of life and empower unique perspectives. We recognise we’ve got some way to go, but we’ll get there with the support of our people. It’s them who drive our future growth. To find out more about what it’s like to work at and our culture we would welcome you to speak to one of our employees on our live chat platform, just click here to speak to an insiderWe recognise some people prefer not to participate in alcohol related sales, interactions, or promotions. If that’s true for you – please raise this with your talent acquisition contact who will advise you on whether this role includes activities related to our alcohol portfolio.-

As a Senior Security Engineer focused on Datadog’s Cloud SIEM product, you will help shape the future of security operations by transforming real-world security expertise into scalable detection, investigation, and response capabilities. You will develop high-impact threat detection content, improve AI-assisted security workflows, and help defenders identify and respond to threats across cloud-native and enterprise environments. Working closely with Product, Engineering, and Security Research teams, you will influence the evolution of Datadog Security products while advancing detection coverage across emerging technologies and attack surfaces. This role offers the opportunity to contribute to open source initiatives, publish security research, and help define the next generation of agentic security operations capabilities.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You'll Do:Research attacker techniques, defensive strategies, and emerging threats, translating findings into scalable security capabilities that protect customers at cloud scale.Design and improve AI-powered investigation, threat hunting, and response workflows that support Datadog’s agentic SOC capabilities.Own the lifecycle of threat detections and automated security workflows, from research and design through deployment, measurement, and continuous improvement.Develop high-fidelity detection content across cloud platforms, SaaS applications, identity systems, endpoints, networks, and other modern attack surfaces.Partner with Product, Engineering, Security Research, and customers to influence roadmap decisions and improve security outcomes across the platform.Mentor security engineers and drive improvements through automation, tooling, rapid prototyping, and data-driven optimization.Who You Are:Experienced in detection engineering, incident response, threat hunting, security operations, or related defensive security disciplines.Knowledgeable in securing and operating public cloud environments such as AWS, Azure, or GCP, along with cloud-native technologies including Kubernetes, Docker, and Terraform.Skilled in modern detection engineering practices, including detection-as-code methodologies and large-scale security telemetry analysis.Proficient in Python, Go, or similar programming languages used to automate workflows, analyze security data, and build security tooling.Comfortable driving initiatives through ambiguity while collaborating effectively across engineering, product, and research organizations.Passionate about applying AI and automation to improve how defenders investigate, detect, and respond to threats.Datadog values people from all walks of life. We know not everyone will meet all the above qualifications on day one. That’s okay. If you’re passionate about technology and want to grow your experience, we encourage you to apply.Benefits and Growth:New hire stock equity (RSUs) and employee stock purchase plan (ESPP).Continuous professional development, product training, and career growth opportunities.Mentor and buddy programs that support learning, development, and internal networking.An inclusive culture with opportunities to participate in Community Guilds and employee resource groups.Access to Inclusion Talks and other learning experiences that foster belonging and growth.Comprehensive mental health benefits for employees and eligible dependents.Competitive benefits programs that support employees globally.Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.#LI-HybridAbout Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

About MistralMistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.Role summaryAs a Product Security Engineer within the Cybersecurity organization, you will be the dedicated security partner for one or more product organizations (such as Vibe, Studio or Forge).You will work alongside engineers, researchers and product managers to ensure security is built into every stage of the product lifecycle—from early design and architecture decisions through implementation, production deployment and continuous evolution.Your mission is to help engineering teams build secure products without slowing them down. Rather than acting as a gatekeeper, you will enable teams to make sound security decisions through secure-by-design principles, pragmatic engineering guidance and scalable security automation.You will own the Product Security strategy for your product portfolio, influence engineering decisions, and help define how secure software is built across one of the world's leading AI companies.What you will doServe as the dedicated Product Security partner for one or more product organizations.Drive security throughout the entire product lifecycle, from design and architecture reviews to production deployment and ongoing operation.Lead threat modeling, security architecture reviews and risk assessments for new features, APIs and major architectural changes.Define pragmatic security requirements and secure-by-default patterns that enable engineering teams to ship safely at high velocity for a specific product.Review critical designs and code, focusing on authentication, authorization, tenant isolation, data protection, cryptography and other high-impact security controls.Design product-specific security validation strategies, including targeted testing, abuse-case development and guided agent-based security assessments tailored to each product's architecture and workflows.Partner with engineering teams to prioritize and remediate vulnerabilities identified through code reviews, penetration testing, bug bounty programs and automated security testing.Collaborate with Security Engineering to improve reusable security platforms, developer guardrails and security capabilities integrated into the SDLC.Champion secure software engineering through coaching, technical leadership, reusable design patterns and Security Champion programs.Define Product Security metrics, continuously improve the security posture of your products and help shape Product Security practices across the company.What we're looking for:5+ years of experience in Product Security, Application Security or Software Engineering with a strong security focus.Strong understanding of modern software architecture, distributed systems, APIs and cloud-native applications.Demonstrated experience performing threat modeling, architecture reviews and secure design assessments.Deep understanding of modern software security, including authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows and common vulnerability classes (OWASP Top 10, CWE).Strong software engineering skills in Python, Go, TypeScript or similar languages, with the ability to review production code and build security automation.Experience with application security testing techniques, including manual code review, penetration testing, bug bounty programs.Experience designing product-specific security testing approaches, including security automation or agent-based testing, is highly valued.Strong understanding of Secure SDLC principles from product design through production deployment and long-term maintenance.Excellent communication and influencing skills, with the ability to earn trust across engineering organizations and balance security, product delivery and developer experience.A pragmatic, engineering-first mindset with strong technical judgment and a focus on solving meaningful security problems.What We OfferWe offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.For the most up-to-date details on benefits available in your location, please refer to our Benefits page.Privacy PolicyYour privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.LocationParisEmployment TypeFull timeDepartmentEngineering & Infra

About DatadogWe're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale with trillions of data points per day, enabling seamless collaboration and problem-solving among Dev, Ops, and Security teams for tens of thousands of companies globally. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way.The TeamThe Datadog Security Libraries team owns the customer-side integrations behind our run-time security products App & API Protection, Workload Protection, and Code Security. Our libraries let customers automatically manage application security risk with continuous, real-time monitoring of vulnerabilities and threats against their web applications, serverless applications, and APIs, in production. Automatically integrated with Application Performance Monitoring (APM) distributed tracing and code-level context, our software empowers development, operations, and security teams to build and run secure applications.As a polyglot team we ship and maintain the security capabilities of Datadog's tracing libraries across .NET, Java, Go, Node.js, Python, Ruby, and PHP, on top of a shared C++ core and a set of HTTP proxy integrations (primarily Envoy, NGINX, and HAProxy). Our code runs inside thousands of production applications around the world. Recent work spans exploit prevention (RASP) and WAF detections, API Security, code security (IAST and SCA), and AI-assisted ("agentic") onboarding, always measured by real product outcomes and operational telemetry.The OpportunityWe're looking for a senior, polyglot engineer to contribute across several of our security libraries, with .NET or Java expertise. You'll design and build security integrations and detection features, take them from prototype to production-hardened, and own them operationally as they instrument thousands of applications.As a senior engineer within a product team, we also expect a strong sense of product engineering: you connect the libraries you build to customer adoption and security value, and you help decide what's worth building.What You'll DoDesign, build, and own security integrations and detections (WAF, RASP/exploit prevention, API Security, IAST, SCA) across multiple libraries, with .NET and/or Java as your primary focus.Take projects from prototype to deployed, correct, operable, and maintainable, writing code that safely instruments thousands of applications in production.Own your systems operationally: monitor production telemetry (e.g., WAF/RASP timeouts, performance and cost), debug challenging cross-system issues, and drive down customer-facing problems.Shape the roadmap: help define the OKRs for the systems you own, break features into components other engineers can build in parallel, and drive designs and RFCs to alignment across our security library teams.Partner with product management, backend, and frontend teams to turn product ideas, new detections, agentic onboarding, API security, into capabilities customers actually adopt.Mentor teammates and act as a force multiplier: raise the bar on code quality and testing, and make the whole team more effective than you'd be on your own.Represent Datadog in the relevant language and security communities.What We're Looking ForYou are an expert in at least one of .NET (C#) or Java, and you're a polyglot who can contribute idiomatically across other libraries when needed with the support of their main maintainers. For each language you use, you write clean, correct, well-tested, performant, idiomatic code.You have strong software-engineering fundamentals: you consistently ship modular, maintainable code with little guidance, and you leave code in substantially better shape than you found it.You have a product-engineering mindset: you care about user experience and product outcomes as much as the code, weigh technical trade-offs against customer impact, and help decide what to build, not just how.You have experience building and shipping libraries or SDKs consumed by other developers, and you understand packaging, versioning, and backward compatibility.You care about performance and cost, in both time and space, and you have experience measuring and optimizing to that end.You are operationally mature: you take full accountability for what you ship in production, even when others work on it.You communicate clearly in writing and in person, you drive alignment through RFCs and informal collaboration, give bad news early, and give constructive, empathetic feedback to peers.You have a BS/MS/PhD in a STEM field or equivalent experience.Bonus PointsDeep expertise across .NET or Java, including familiarity with language runtime internals and instrumentation, the JVM, bytecode instrumentation and Java agents; or the CLR/JIT/GC, IL rewriting, and DiagnosticSource/EventPipe in .NET.A track record of shipping across several of our languages (Go, Node.js, Python, Ruby, PHP, C/C++).An application security background: WAF, RASP, SAST/IAST/SCA, threat detection, or secure-by-design practices.Experience with auto-instrumentation, APM/distributed tracing, or code telemetry and introspection.A history of maintaining open-source projects, with public projects or published packages (e.g., NuGet, Maven).Experience with AI-assisted developer tooling or agentic workflows.A developer-experience or customer-support sensibility.#LI-HybridAbout Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

L’entreprise en quelques motsDévelopper la visibilité et la vente en ligne via une solution SAAS pour le TourismeÀ ProposAvez-vous déjà réservé un hôtel en ligne ? Alors vous avez probablement utilisé l'outil de cette scale-up sans le savoir.Chaque jour, ils aident plus de 17 000 hôtels dans le monde à développer leur visibilité et leurs ventes en ligne grâce à une gamme de solutions SaaS et de marketing numérique.Descriptif du posteVous superviserez la sécurité du système d'information Suivi de la politique de sécurité de l'entitéOrganiser les travaux de sécurité (formations, tests et audits, etc.)Accompagner les projets pour assurer la prise en compte de la sécuritéRépondre aux questions techniques ou organisationnelles sur les questions de sécuritéOrganiser le déploiement des technologies de sécuritéTraiter les alertes de sécuritéAssurer un reporting régulier sur le niveau de risque et les progrès en matière de sécurité, permettant une visibilité au niveau du top management.Profil recherchéVous avez au moins 5 ans d'expérience professionnelle, dont 2 ans dans le domaine de la sécurité.Idéalement, vous avez une expérience préalable en développement web, voire devops, puis avez évolué vers des missions de sécurité telles que des tests d'intrusion ou la gestion opérationnelle de la sécurité dans des environnements web/e-commerce innovants.Connaissance des principales vulnérabilités web (OWASP), et des environnements d'hébergement (Windows / Linux / Cloud),Connaissance d'au moins un des langages de développement suivants (PHP, NodeJS, .NET, Java) afin de fournir des recommandations pertinentes ;Connaissance des bases de la gestion des infrastructures (réseau, firewalls / proxy...) ,Sécurité du poste de travail et des outils bureautiques (Antivirus, sécurité de la messagerie, accès internet, politique d'authentification).Connaissance des solutions de sécurité innovantes,Connaissance des normes PCI DSS et GDPR Gestion de projet et de budgetEsprit d'équipe, curiosité, initiative, sens du service, excellent relationnel : écoute, pédagogie, rigueur convaincante, intégrité, sens de l'organisation.Bon à savoir / les avantagesIdentifiantjob-6454CDI70kScale-upParis et périphérieTélétravail partiel (1-4 jours/sem)

As a Platform Security Engineer you will partner with different stakeholders across the organization to secure our infrastructure and application components of the Datadog platform. As part of the Platform Security organization we secure the building blocks of Datadog’s applications and infrastructure. We do this by building solutions solving systemic risks making the secure path easier and the insecure path harder.At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them.What You’ll Do: Solve our most challenging cloud infrastructure security & application security problems starting with our core building blocks and golden paths.Enable our engineers to build and ship secure solutions quickly.Build and extend Datadog’s Platform Security solutions.Leverage and influence the direction of Datadog’s products to secure our infrastructure, and provide internal feedback that enables our teams to improve the products for ourselves and our customers.Who You Are: You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience.You don’t want to just provide security recommendations, you want to help implement solutions to solve systemic issues. Passionate about advocating for and implementing solutions to complex security problems, at-scale, in a large multi-cloud self-managed Kubernetes environment.Proven experience in securing enterprise SaaS applications including securing the underlying authentication flows, authorization patterns, and input validation at API boundaries.Demonstrated experience in securing the deployment & management mechanisms for software and infrastructure changes.Familiarity with common security frameworks such as OWASP, MITRE ATT&CK, PASTA/STRIDE, CIS, etc.You have prior experience in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security or Application Security.Software engineering background with hands-on code review experience; Go, Python, or RustExperience with one or more Kubernetes PKI & network technologies (Consul, Envoy, Cillium, Vault, Istio, etc.).Experience with one of the major cloud providers (AWS, Azure, GCP) and Kubernetes.Able to work both independently and collaboratively, willing to work in a fast paced, high growth environment.You stay updated with modern security best practices, technologies and emerging threats.Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. Benefits and Growth: New hire stock equity (RSUs) and employee stock purchase plan (ESPP)Continuous professional development, product training, and career pathingIntradepartmental mentor and buddy program for in-house networkingAn inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)Access to Inclusion Talks, our Internal panel discussionsFree, global mental health benefits for employees and dependents age 6+Competitive global benefits#LI-RemoteAbout Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

Offre n : 3100Publié le : 06/03/2026 Fonction : CHEF DE PROJETContrat : CDILieu de mission : PARISDépartement : 75Salaire : Suivant profilCyberdefense & Security Architecture Lead - PARISDescription du poste : Démarrage : ASAP Localisation : Paris Ouest (2 à 3 jours sur site par semaine) Expérience : 10 ans minimum Fonctions : Architecture Sécurité / Cyberdéfense / Cloud Security Spécialités technologiques : Cloud • Cybersécurité • Intelligence Artificielle • IA Générative • Conformité & Gouvernance (GDPR) Contexte de la mission Dans le cadre du renforcement de ses capacités de cyberdéfense et du développement de nouvelles offres de sécurité, notre client recherche un Cyberdefense & Security Architecture Lead. La mission consiste à concevoir, structurer et piloter l’architecture des solutions de cybersécurité, notamment autour des environnements cloud et des enjeux de sécurité liés à l’intelligence artificielle générative. Le consultant interviendra au cœur des initiatives de transformation et accompagnera les équipes produit et sécurité dans la définition, l’intégration et l’évolution des solutions de cyberdéfense. Missions principales Architecture des solutions de cyberdéfense • Concevoir et structurer un portefeuille de solutions de cybersécurité, incluant des produits liés à l’IA agentique. • Définir et piloter l’architecture des plateformes de cyberdéfense. • Concevoir et structurer une initiative Cloud Security Posture Management (CSPM). • Produire les livrables d’architecture : diagrammes, HLD, documentation technique et référentiels. Gouvernance et alignement stratégique • Collaborer avec les équipes produit pour définir les roadmaps sécurité à court et long terme. • Garantir l’alignement des solutions avec les politiques de cybersécurité de l’entreprise. • Être le référent cyberdéfense auprès des équipes métiers, produit et IT. • Présenter et défendre les choix d’architecture devant les instances de gouvernance IT. Transformation et projets d’architecture • Apporter une expertise technique dans les projets de transformation et de migration d’architecture. • Piloter la conception et l’intégration des solutions de cyberdéfense dans les projets IT. • Évaluer et comparer différentes options d’architecture et recommander les solutions les plus pertinentes. Innovation et veille technologique • Réaliser des analyses de marché et études technologiques pour orienter les choix stratégiques. • Participer aux processus RFI / RFP et à l’évaluation de fournisseurs. • Piloter des Proof of Concept (PoC) pour tester de nouvelles solutions de Compétences requises : Expertise attendue Expérience • 10 ans minimum d’expérience en cybersécurité • 10 ans minimum en architecture ou conception de solutions de sécurité Technologies et solutions • CSPM (Cloud Security Posture Management) • CWPP (Cloud Workload Protection Platform) • XDR / EDR • Endpoint Protection • Web Application Firewall (WAF) • Proxies et sécurité réseau • Security Operations Center (SOC) • Vulnerability & Compliance Management • Zero Trust Architecture cloud et sécurité • Architecture de sécurité cloud • Sécurisation des workloads et infrastructures cloud • Intégration de solutions de cyberdéfense dans des environnements hybrides ou multi-cloud IA et cybersécurité • Connaissance des problématiques de sécurité liées à l’IA générative (GenAI) • Compréhension des enjeux de sécurité dans les architectures d’intelligence artificielle Référentiels et conformité Bonne maîtrise des standards et réglementations : • ISO 27001 / ISO 27005 • NIST • GDPR • DORA Contact : MARC SOREL 26 rue Daubenton 75005 PARIS Telephone : 01 43 37 99 22 Fax : 01 45 87 01 70 E-mail : Répondre à cette offre Retour aux offres d'emploi

You will support the Head of GO Security Engineering COE in integrating security into all projects, products, and services through governance, processes, and methodologies. It involves developing security frameworks, conducting risk analyses, and ensuring security by design across projects and stakeholder interactions. The position also focuses on enhancing security assurance and aligning various functions to maintain robust security standards within AXA GO.About AXAAs a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.About the entityAXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation. We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.At AXA Group Operations, we want to be recognized in three fields of action:State-of-the-art Data Technology to drive customer experienceState-of-the-art Procurement & Sourcing to drive efficiency and better manage risksHigh-Performing Global Team for stronger partnerships with AXA entitiesAbout the jobJob Purpose Your responsibilities include:Support Head of GO Security Engineering COE in ensuring that security is implemented by design in all projects, products, and services of GO: Security in IT Governance, Process and Methodologies and Roadmap, Oversight AXA GO Product to validate security integration Participate to the development and implementation of a consistent approach to all security topics within the scope, including Information Security, Operational Resilience, PS, H&S: merging security topics into security project management including in Agile frameworks Support the Communication and advisory to the different stakeholders of the projects regarding Security by design approach Support the Project team in the implementation of the cyber risk analysis and security assurance plan for projects or products evolution Contribute in the GO Security Engineering COE team in the design enhancement of the framework to support project and product owner in meeting the security requirements: Integration and support of security into Project Management Framework and SDLC Contribute in delivering the security oversight in products and projects in GO Interact with all relevant stakeholders of the projects or customers of GO to provide visibility on the level of security of GO Products Support alignment/coordination between the different line functions involve in the review of Products & Project oversight (Data Privacy, Internal Control, Operational risk, Legal…) as well other Security Stakeholders (Group Security, Cyberdefense, etc.) Main MissionsYour missions as a Security Risk Analyst are to : Identify and analyze product/project risks, recommend appropriate mitigation options and document all components in clear, business-intelligible language Serve as an expert advisor in the GO Security COE team of GO in the implementation and maintenance of security assurance of the products including third parties review Collaborate with and support the Group Security Practice and other stakeholders of GO Security as necessary to ensure that security within GO is relevant, cost-effective and is delivered in accordance with the Group Security Strategy and Security by Design best practices Support the implementation of continuous improvement processes and activities (e.g. good practices, reporting, problem resolution) to ensure quality and relevance of security services Support the implementation of security strategy, policies, shared security services and action plans based on the Group Security Strategy Contribute to the maintenance in understanding of emerging technology, risks and industry trends. Assess the impact on the business environment and recommend appropriate mitigation actions or the prioritization of projects and investments Escalate the need to redirect any critical risk not properly addressed during the project lifecycle or suggest changes to the approach to mitigate critical risks and ensure legal, regulatory or commercial compliance Promote a culture of security risk based mindset and raise awareness when relevant Contribute to the continuous development and maintenance of a security assurance framework to enforce consistency and effectiveness in the security by design approach Support the reporting process of information security, operational resilience and Physical Security & Safety for different levels of customers (top management, middle management and team) Provide technical security Assurance analysis on local security implementation of the products when required Support the implementation of a coordinated responses to security audit and compliance issues Contribute to the governance organization and management of projects within the team (planning, framework, staffing, purchasing, operations, ..) Expected skills & experienceWe are looking for someone with the following experience and skills: ExperienceExperience in cyber risk threat analysis, security, Cloud Architecture and projects, IT audit or related area, Agile or DevSecOps, > 7 years Previous experience in managing projects preferred in an international context Previous experience as interim or acting Security in projects manager, Information Security Officer, Physical Security Officer, Operational Resilience Officer, or extensive experience in reporting to a CSO, CISO, CORO, PSO or other 2nd line cybersecurity expert in an international organization. Security Risk analysis methodology Information Security and /or Information Technology industry certification (CISSP, CISSP-ISSAP, CISM, ISO 27001 Lead Auditor, GIAC or equivalent) Business Continuity Industry certification (MBCI, DRII…) Physical security certification (CPP, PSP, BTEC…) Cloud services or security architecture (CCSK, CCSP, ..) Technical skillsAbility to develop networking, foster team collaboration to seek collective achievements while supporting the projects , product evolution or security assurance review Communication skills: Effectively communicates (oral and written) the security by design framework & the benefits in achieving the same Ability to apply analytical rigor to understand complex business et IT scenarios Positive mindset to support the security analysis and eager to learn and grow on new technological areas or frameworks (Agile, AI, ..) Capacity to interact with different level of stakeholders from business to technical Results oriented, project and budget management Good sense of organization and adaptability Flexibility on working hours Fluent in English What we offerWe bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.

Tech at Pernod Ricard isn’t your average Tech job — we do things differently. From day one, you’ll be part of our borderless ‘one Tech team,’ driving global impact for iconic brands loved worldwide. And as Tech evolves, so do we. We give our people the platforms and opportunities to grow and shape their careers. At Pernod Ricard, we don’t just do Tech. We do Tech with a twist. Ready to make a Tech impact? Pernod Ricard is looking for an Operations Security Product Manager to encompass steering the strategic vision and roadmap for mid and long term within the Product Family. From our HQ in central Paris, connect with our experts located across the world, and start an exciting journey with international opportunities. Your key missionsThe Operations Security Product Manager is responsible for, but not limited to:Identity and Access Mgmt ( Active Directory, SSO, MFA, EntraID, IGA framework, RBAC, PAM, Conditional Access, etc) strategy definition, realization and operations excellences delivery. Network and Cloud Operations Security ( Firewalls management, SSE, Advance cloud firewalls management) strategy definition, realization and operations excellences delivery. Partner stakeholders ( e.g. CISO team and Core Portfolio global products team) for maximizing the value creation of Operations Security in Pernord Ricard. The responsibilities encompass steering the strategic vision and roadmap for mid and long term within the Product Family. This includes ensuring comprehensive coordination across multiple squads dedicated to the Product Family, and effective value realization to the business.Demand Management: Collect, qualify and assess demands coming from the Global Business Process Owners and the Tech Function itself. Ensure that local needs are effectively captured and arbitrated, in collaboration with proximity teams. Consolidate Business & Tech Product Demand backlogs, analyze and integrate them into the right Squad’s Backlog. Backlog Management: Contribute to EPIC demands Review and be appointed as EPIC Owner, perform EPIC Analysis and contribute to Portfolio backlog review, prioritization and arbitration, allocate Features to Product Owners and contribute to their prioritization and integration to Portfolio Synchronization BacklogsITFM: Provide Product roadmap and backlog, squad’s resource needs forecast. Oversee overall funding of my scope, perform variance analysis and provide justification, Track Product’s ROI and costs Product Lifecycle Management: Drive Product Vision and roadmap through Product Framing Analysis and EPIC/Features definition and prioritization. Work with vendor engagement officers to define editors’ roadmap. Define and track value Product value generation and related investment. Oversee product squads’ activities throughout product lifecycle, providing expertise & securing arbitration. Ensure products demos and roll-out plans are effective and consistent, and defined in collaboration with the Business and the Proximity teams. Resource Management: Coordinate product teams work, animate PO community, secure engagement & collaboration, define squad’s resource needs for my scope, collaborate with tech leaders for resource mobilization and eventually adjust plans and roadmaps based on available resource capacityIf you recognize yourself in the description below, don’t wait to apply! Education : BAC +4 year or equivalent degree in a related fieldBackground & expected experiences : 10+ years' experience in managing multiple Operations Security technologies in a complex enterprise environment. Experience with multiple technologies: CISCO, Fortinet, Zscaler, Azure network services, WAF, Microsoft Identity and Authentications Services, IAG framework, CI/CD in IT Operations framework, etc. Professional Certifications on any of those technologies is a key asset. Proven experience in IT security management risk assessment, including build and implement remediation plans. Strong understanding of the key Service delivery practices in Security Operations. Able to articulate and formalize strategies in a meaning value driven approach. Easy to build impactful support decision papers. Able to develop strong business partnership with senior stakeholders. Inspire upwards and downwards the organization by cross function leadership. Good understanding and/or experience with agile practicesEnglish fluency is mandatory.Wait, there’s more… We offer you an outstanding and collaborative workplace that embodies our sharing & conviviality culture, the possibility to work remotely (up to 2 days a week), a very complete mutual insurance, an attractive compensation including profit-sharing, the possibility to train daily, employee events… Pernod Ricard is committed to offering equal opportunities to all talents. Our recruitment methods focus on skills and competencies. Job Posting End Date:Target Hire Date:2025-10-06Target End Date:SummaryLocation: ParisType: Full time

This role is part of Datadog’s Security Agent team, which powers critical security capabilities across Workload Protection, Vulnerability Management, Cloud Security products, and other emerging security offerings. As a Staff Software Engineer, you will lead the design and development of low-level Linux instrumentation and runtime security technologies that help customers detect threats, monitor system activity, and protect cloud-native workloads at scale. You will work on complex technical challenges involving eBPF, Linux kernel internals, performance-sensitive systems, and large-scale data collection while influencing technical direction across multiple product teams. This role offers significant ownership, broad organizational impact, and the opportunity to shape the future of Datadog’s security platform.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You’ll Do:Lead the architecture and development of security agent capabilities that power runtime threat detection and workload protection across Datadog Security products.Design and build reusable eBPF-based monitoring functionality for process, file, and network visibility within Linux environments.Drive end-to-end delivery of new features, from technical strategy and design through implementation, testing, and rollout.Establish and evolve testing methodologies that improve platform coverage, detection quality, reliability, and performance.Partner with product, security, infrastructure, and engineering teams to deliver shared platform capabilities used across multiple Datadog products.Provide technical leadership by influencing engineering direction, mentoring peers, and helping resolve complex cross-functional challenges.Who You Are:You have significant experience building software in Linux environments, including knowledge of Linux internals, kernel APIs, or systems programming.You have hands-on experience with eBPF, kernel-level instrumentation, driver development, networking systems, agent development, or related low-level technologies.You've built and run systems where performance and reliability actually matter.You have experience building and maintaining production software across diverse Linux distributions and kernel versions.You are product-minded and customer-focused, balancing technical excellence with customer impact and usability.About Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

Descriptionleboncoin, est le 1er site généraliste de vente entre particuliers en France, leader sur les marchés de l’immobilier et l’automobile, acteur clé sur les biens de consommation de seconde main et sur l’emploi. Chaque mois leboncoin est plébiscité par 30 millions de Français qui apprécient la richesse de son offre et la facilité des échanges qu’il permet au quotidien.leboncoin a été élu Marque préférée des Français dans les catégories “site de seconde main”, “immobilier” et “automobile” en 2026.Notre plateforme est entièrement hébergée sur AWS, s'appuie sur Kubernetes et est développée par près de 800 collaborateurs Product & Technology répartis dans plus de 70 Feature Teams.Dans le cadre de la relocalisation progressive des activités cybersécurité historiquement opérées par le groupe Adevinta, nous construisons aujourd'hui une organisation cybersécurité autonome capable d'accompagner durablement la croissance de leboncoin.Rejoindre cette équipe aujourd'hui, c'est participer directement à la construction de cette nouvelle capacité.Responsabilités liées au poste Nous recherchons un(e) Detection & Incident Response Engineer pour rejoindre notre équipe Cyber Defense.Vous ne rejoindrez pas une organisation cybersécurité déjà complètement construite : vous participerez directement à sa construction.En collaboration avec notre Defensive Engineer déjà en poste, vous constituerez le cœur de la capacité Cyber Defense de leboncoin.Ensemble, vous assurerez le fonctionnement quotidien des activités de détection et de réponse aux incidents tout en contribuant à faire évoluer progressivement les processus, les méthodes et les capacités de Cyber Defense dans le cadre du carve-out avec Adevinta.Ce poste combine :une forte activité opérationnelle ;des investigations techniques complexes ;de la réponse aux incidents ;de l'amélioration continue ;de la structuration des capacités Cyber Defense.Vous resterez pleinement impliqué dans les activités techniques tout en contribuant à construire les futures pratiques de Cyber Defense de leboncoin.Ce que vous ferez :Participer aux opérations quotidiennes de Cyber DefenseVous contribuerez directement au fonctionnement quotidien de notre capacité de détection et de réponse aux incidents.Vous serez notamment amené à :analyser les alertes de sécurité escaladées par notre MSSP ou les équipes internes ;qualifier les événements de sécurité ;conduire les investigations techniques ;réaliser des analyses de logs et des investigations avancées ;conduire des investigations de type Digital Forensics lorsque nécessaire ;participer aux activités de Threat Hunting ;accompagner les équipes techniques dans les actions de remédiation ;contribuer aux analyses post-incident et aux retours d'expérience.Ce poste reste résolument hands-on.Vous passerez une part importante de votre temps à investiguer et résoudre des incidents de sécurité.Répondre aux incidents de sécuritéVous jouerez un rôle majeur dans la gestion des incidents de sécurité.À ce titre, vous serez amené à :conduire les investigations techniques lors des incidents majeurs ;coordonner les actions techniques de réponse ;assurer le rôle d'Incident Commander lorsque la situation le nécessite ;coordonner les équipes Produit, Infrastructure, Platform, Corporate IT et Cloud ;collaborer avec les équipes Privacy, Legal et Communication lors des incidents majeurs ;coordonner les investigations avec les équipes cybersécurité d'Adevinta lorsque des incidents concernent plusieurs entités du groupe ;participer aux exercices de gestion de crise.Améliorer nos capacités de détectionVous participerez activement à l'amélioration continue de nos capacités de détection.Vous contribuerez notamment à :développer de nouveaux cas d'usage de détection ;améliorer les règles SIEM ;optimiser la qualité des alertes ;réduire les faux positifs ;améliorer les processus d'investigation ;participer à l'automatisation des investigations.Construire la future capacité Incident Response de leboncoinCe poste ne consiste pas uniquement à opérer.Vous participerez directement à la construction de notre future capacité Incident Response.Vous contribuerez notamment à :définir les processus locaux de gestion des incidents ;adapter les processus hérités d'Adevinta au contexte de leboncoin ;rédiger les playbooks de réponse ;définir les procédures d'escalade ;participer à la définition des indicateurs opérationnels ;améliorer en continu notre niveau de préparation.Vous deviendrez progressivement un élément clé de notre capacité Incident Response.Participer au carve-out cybersécuritéDans les prochaines années, leboncoin construira progressivement son autonomie vis-à-vis du groupe Adevinta.Vous participerez activement à cette transformation.Vous travaillerez régulièrement avec les équipes cybersécurité du groupe afin de :assurer le transfert des connaissances ;reprendre progressivement les responsabilités opérationnelles ;documenter les processus locaux ;maintenir une coopération efficace pendant toute la période de transition.Participer au dispositif d'astreinteVous participerez au dispositif d'astreinte cybersécurité.À ce titre, vous serez amené à : intervenir lors d'incidents de sécurité en dehors des heures ouvrées ;conduire les investigations techniques nécessaires ;coordonner les actions de réponse ;assurer une communication efficace avec les différentes parties prenantes ; accompagner le retour à un fonctionnement normal.Votre rôle dans l'équipeVous travaillerez en binôme avec notre Defensive Engineer.Ensemble, vous constituerez le cœur de la capacité Cyber Defense de leboncoin.Ce poste ne comporte pas de management hiérarchique. En revanche, vous exercerez un véritable leadership technique.Vous serez reconnu comme un référent sur les sujets de détection, d'investigation et de réponse aux incidents et contribuerez activement à faire évoluer les pratiques de l'équipe.Rejoindre leboncoin, c'est :rejoindre une petite équipe ayant un impact direct sur la sécurité de l'une des plus grandes plateformes numériques françaises.contribuer à protéger des millions d'utilisateurs dans un environnement Cloud Native moderne.travailler aux côtés d'équipes Produit, Engineering, Platform et Infrastructure particulièrement matures.participer à un projet unique : construire la future capacité Cyber Defense de leboncoin dans le cadre de son autonomisation progressive vis-à-vis du groupe Adevinta.Si vous aimez autant les investigations techniques que les défis de construction d'une organisation, ce poste vous permettra d'avoir un impact concret, durable et visible sur la cybersécurité de l'entreprise.Exigences du posteMinimum 5 ans d’expérience (post diplôme) sur des rôles d’analyste sécurité niveau 2 et d’ingénierie défensiveNous recherchons avant tout une personne passionnée par la Cyber Defense et les investigations techniques.Vous disposez d'une expérience solide dans plusieurs des domaines suivants : Incident Response / Digital Forensics / Threat Hunting / Detection Engineering / SIEM Engineering / Scripting et automatisation / Endpoint Detection & Response (EDR) / Investigation Cloud AWS / Kubernetes Security / Analyse de logs / Gestion de crise cyber.Une expérience sur plusieurs des technologies suivantes : Elastic SIEM / CrowdStrike / Wiz / AWS / Terraform / GitOps / CI-CD / Langage de scripting Python / Kubernetes / incident.io / Jira.Un usage quotidien de l’IA et une mindset tourné vers l’automatisationCe que nous apprécierons particulièrement :Vous aimez comprendre le fonctionnement des systèmes.Vous appréciez les investigations complexes.Vous savez garder votre sang-froid pendant les incidents.Vous êtes capable de prendre des décisions dans des situations où les informations sont incomplètes.Vous aimez partager vos connaissances.Vous aimez autant construire des processus que résoudre des problèmes techniques.Vous êtes pragmatique, autonome et orienté résultat.Enfin, vous avez envie de rejoindre une équipe où chacun contribue directement à construire une capacité cybersécurité moderne plutôt qu'à simplement faire fonctionner une organisation déjà en place.Avantages du posteDes conditions de travail agréables (locaux, télétravail…)Une rémunération attractive Une carte tickets restaurants et une couverture mutuelle et prévoyance efficace et compétitive et plus Chez leboncoin, nous sommes convaincus que la diversité des parcours, des expériences et des points de vue est une richesse essentielle. Cet engagement se reflète pleinement dans notre processus de recrutement : nous évaluons chaque candidature uniquement au regard des compétences, de l’expérience et de la motivation, sans aucune forme de discrimination.Si vous avez besoin d’un aménagement spécifique dans le cadre du processus de recrutement, n’hésitez pas à nous en faire part : nous serons ravis de vous accompagner.

Engineering·Barcelona, ParisJoin us!Get to know usDo you want to help us shape what the future of work will look like and how it will best embrace our life's aspirations? If this sounds like a journey you want to embark on, we may have the right role for you! PayFit is an intuitive software as a service payroll and HRIS solution designed specifically for SMBs. Since 2015, we have set ourselves a mission to simplify payroll for SMBs and enable employers and employees to grow together. We are a European company operating from 3 main countries (France, Spain, and the UK) where we are supporting over 20,000 clients.Creating a fulfilling work environment and culture is also a core mission at PayFit, and our day-to-day work philosophy is reflected in our four values:Care: We genuinely care for others whoever they are, whatever they think.Excellence: We aim to improve and achieve better results every day.Humility: Staying humble and exchanging transparent feedback helps us to grow and improve.Passion: We are the architects of PayFit's success.A key part of our culture, and essential for our success, is also improving the diversity of our teams and building an inclusive culture where you can be yourself at work.This is why our recruitment focuses on the skills you demonstrate, and not only on your academic background or previous professional experiences. At PayFit we understand that you can gain applicable skills through a variety of life experiences and we are interested in knowing them, too.Location :You can work at this role from any location in France or Spain, with occasional visits to the Paris office.Position Overview :We're looking for a Senior Application Security Engineer to join our Application Security team, part of the Engineering Platform tribe.You'll be the AppSec engineer closest to our product engineering teams, not the gatekeeper at the end of the pipeline, but the partner who helps developers ship secure software by default. You'll drive a meaningful shift-left across the SDLC, mentor the rest of the security team, and bring an offensive mindset to how we test our own applications, including how we leverage AI to pentest them.This is a senior individual contributor role with strong influence. You'll work alongside another Security Engineer and our Compliance Analysts, and partner daily with infrastructure, platform, and product engineering teams to keep PayFit secure as we scale across Europe.Your mission : Shift security left across the SDLCEmbed security into how PayFit builds software. Partner with product teams from design to deployment; threat modeling new features, reviewing architecture decisions, performing code reviews, and helping developers internalize secure-by-default patterns. Make security a multiplier, not a bottleneck.Drive offensive testing of our applications, including with AIRun internal application pentests with an attacker mindset and explore how AI can be used to scale and deepen our offensive testing, from automated reconnaissance to AI-assisted vulnerability discovery on our own codebase and APIs. Turn findings into concrete remediation plans and reusable detection patterns.Secure the SDLC in the age of AIHelp define how PayFit builds software securely when AI is part of the toolchain, from AI-assisted code generation in developer workflows to agentic systems we operate internally. Contribute to guardrails, review patterns, and threat models for AI-augmented development and AI features in our product.Build and operate AppSec toolingDeploy and maintain security tooling across our CI/CD pipelines: SAST, SCA, container and image scanning, secrets detection, and supply chain controls. Build automation in TypeScript to scale security across our AWS and K8S/EKS estate, integrating with our existing toolchain (GitHub, CircleCI, Spacelift, Wiz, Datadog, Jira).Grow the team and the security cultureMentor the other members of the Security & Compliance team and raise the security bar across engineering. Lead awareness sessions, write standards, run training, and animate the security community at PayFit. Make others better. That's a core part of the job.Handle vulnerabilities and incidentsTriage HackerOne reports, follow up on findings with engineering teams, and contribute to incident response: investigation, coordination, and post-mortem. Identify systemic issues behind individual findings and drive durable fixes.What we are looking for :5+ years of experience in security, with a strong Application Security focus and a background in software engineering or DevOpsSolid Cloud security knowledge, with a strong advantage for AWS (IAM, Secrets Manager, Organizations, Identity Center), and with the ability to design and review secure cloud-native architecturesHands-on experience reviewing the security of applications across architecture, code, and infrastructure, with a risk-driven approachComfortable with application security fundamentals: authentication and authorization, encryption, integrity, logging, supply chainOffensive mindset: experience running application pentests, exploiting vulnerabilities, and translating findings into actionable remediationCoding skills in TypeScript (for code review and building security tooling)Experience working in modern SaaS ecosystems: IaC, GitOps, DevSecOps, CI/CD (Terraform, GitHub, CircleCI, Helm, or equivalents)Strong communication skills: you can talk to developers as a peer, explain risk to non-security audiences, and influence without authorityA genuine taste for mentoring and growing othersProfessional English: written and spokenNice to have:Experience in pentesting or securing AI/LLM-powered applications, or using AI tooling for offensive securityWorking knowledge of Kubernetes security in production environmentsExperience with bug bounty programs (HackerOne or equivalent)Familiarity with security observability and detection tooling (SIEM, Datadog, Wiz, or similar)Exposure to compliance frameworks (ISO 27001, SOC 2, DORA) ; useful given our team setupOur stack:Technical stack: TypeScript, AWS, Kubernetes, Helm, TerraformCode & delivery: GitHub, CircleCI, ArgoCD, SpaceliftSecurity & observability: Wiz, Datadog, HackerOne, Burp SuiteProject management and knowledge: Jira, NotionCommunication: Slack, Gather, MeetWhy join PayFit:Real impact: You'll directly shape how 20,000+ businesses across Europe trust us with their payroll and HR dataSenior IC role with reach: You influence engineering at large, not just the security teamPragmatic security: We care about real risk reduction, not theaterAI-forward security: A real mandate to explore AI in offensive security, not a buzzwordModern stack and modern practices: Cloud-native, GitOps, DevSecOps, and the autonomy to shape themAI-First Developer Experience: We fully support and fund the use of AI agents (Claude Code, Codex, OpenCode, etc.) to automate routine tasks, accelerate refactoring, and minimize "toil," allowing you to stay in a state of deep flow.Interview process :1. Interview with a Talent Acquisition Specialist2. Interview with the Hiring Manager3. Technical Interview with the Team4. Final Interview Background Check (ISO27001 certification): identity, diploma, and past professional experiences will be checked after the offer.What we offerFlexibility: We believe it is key to producing your best work and being fulfilled. We therefore offer the possibility to work away from our main offices, within France, as well as abroad for a defined period. Further requirements may apply depending on the role and your overall experience.Learning & Development: At PayFit, we offer a comprehensive learning platform that enables you to acquire new skills daily, supported by our company. We also have English language courses to improve your business communication vocabulary and get to the next level.Career Development: We want you to progress and be free to choose which direction you want to grow. There are also opportunities for internal moves.Health insurance: Henner Mutuelle Insurance (60% covered by PayFit, free coverage for childrenTransportation: 50% of public transportation costs are covered by PayFit for those living within the Ile de France region, or assistance with sustainable mobility (a bicycle rental subscription, purchase of soft mobility equipment to get to work, etc.).Meals: A restaurant card with our partner Swile (9 per workday) covered at 60% by PayFitA Work Council grant: A monthly allowance to be spent on culture, sports, personal services, etc., as well as a vacation bonus.Home office budget: A contribution in per year to help you get set up in the best conditions. A MacBook is our standard working toolParental support program: Salary maintenance during the first month of additional parental leave.Time off: 25 days of holidays + RTT days (depending on the contract).Disability Inclusion: All of our positions are open to any person living with a disability. To guarantee equal treatment and opportunities, we will take, based on individual needs, appropriate measures to adapt the work conditions of PayFiters with disabilities, and if needed also during the recruitment process. Please let us know what you need and we will do our best to accommodate!DepartmentEngineeringRole Senior Software Engineer LocationsBarcelona, ParisEngineering·Barcelona, ParisJoin us! Loading application form

We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures. If you want to make a true impact, we want you to join us at Ledger.At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 millions units already sold in 200 countries. The teamYou will join the Security Operations team, which is responsible for protecting Ledger’s corporate, cloud, SaaS, and data center environments. Its mission is to anticipate, detect, investigate, and respond to cyber threats—including monitoring, alert triage, incident response, detection, visibility, automation, exposure tracking, and continuous process improvement. This scope is distinct from that of the Donjon (product security): SecOps covers the operational security of internal environments, the cloud, endpoints, workloads, identities, and infrastructure.As a close-knit and experienced team—technically rigorous and committed to knowledge sharing—we are also continuously building the SOC itself: integrating new log sources, ensuring data quality, expanding detection coverage, and developing reliable dashboards and operational workflows.Our technical stack includes:Splunk for SIEM, investigations, and dashboards;CrowdStrike for EDR and endpoint/workload security;Wiz for cloud security and exposure management;Torq for SOAR and automation;AWS, including modern environments such as EKS/Kubernetes;An in-house, internally developed Agentic SOC for alert enrichment, correlation, investigation support, reporting, and automation.AI is at the heart of how we work: investing in AI applied to security is a strategic priority for Ledger this year. We’ve built our own in-house Agentic SOC, which autonomously investigates weak signals—the large volume of unreliable alerts that a human team couldn’t sort through manually—and enriches them, so our engineers can focus on what matters most and resolve incidents faster: high-quality detection, reduced noise, and accelerated investigations.What you’ll be doing:As a Senior Security Operations Engineer, you are at the heart of the SOC: you lead investigations from start to finish, manage the lifecycle of detections, dashboards, and automations, and continuously expand our visibility (cloud, endpoints, identities, SaaS, infrastructure). You work independently on complex issues, decide on the next steps - investigation, containment, remediation, or escalation - serve as a technical resource and point of escalation for more junior analysts (whose work you review and with whom you share your knowledge), and make a tangible contribution to improving our internal Agentic SOC.Operate the SOCAnalyze, classify, and prioritize alerts (from Splunk, CrowdStrike, Wiz, AWS, and other sources), and conduct in-depth investigations into incidents affecting endpoints, the cloud, identities, SaaS, workloads, and infrastructure.Provide clear, actionable context to inform next steps, and serve as an escalation point for less experienced analysts.Leverage the Agentic SOC, which investigates weak signals and enriches alerts, so you can focus your time on the incidents that matter.Visibility & DetectionBuild and tune cloud detection use cases (AWS, IAM activity, EKS/Kubernetes, container workloads), and use Wiz to track and prioritize cloud exposure as part of your detection work.Integrate and maintain the necessary log sources (cloud, endpoints, identities, SaaS, infrastructure, Kubernetes) and improve data quality: completeness, parsing, normalization, relevance, and usability.Identify visibility blind spots and work with the IT, Cloud, Infrastructure, and Engineering teams to reduce them.Design, write, and optimize Splunk queries; develop new detection use cases based on available logs, refine them, and document their logic; reduce noise and improve signal quality.Incident ResponsePlay a leading role in investigations: gathering evidence, reconstructing timelines, and documenting actions taken.Monitor containment, remediation, and post-incident measures.Turn lessons learned into sustainable improvements and formalize processes: detection mechanisms, runbooks, dashboards, and automations.Contribute to automation and our Agentic SOCBuild and maintain automations (Torq/SOAR, scripts, APIs) that accelerate triage, enrichment, and response.Contribute to the design and continuous improvement of the internal Agentic SOC—the AI system that investigates weak signals, enriches alerts, and assists with investigations—and expand its capabilities: new investigation workflows, better correlation, and tighter integration with detection and response.What we’re looking for:Solid & proven experience in SecOps, SOC, cloud security, incident response, or infrastructure security, with a track record of building and improving SOC capabilities (logs, detections, dashboards, automations, runbooks, workflows) and conducting independent investigations.Comfortable working in cloud and SaaS environments and with rapidly evolving technologies.Proficiency in SecOps fundamentals: triage, investigation, incident response, log analysis, and documentation.Strong, hands-on cloud security skills (ideally AWS): investigating IAM and identity activity, analyzing cloud audit logs (e.g. CloudTrail, GuardDuty), securing workloads, containers, and Kubernetes (EKS), and scoping cloud incidents end-to-end. Comfortable with exposure/CSPM tooling (ideally Wiz).SIEM (ideally Splunk) with the ability to write queries for investigation and detection; EDR (ideally CrowdStrike).Automation using Python, Bash, APIs, GitHub Actions, SOAR, or equivalent.Interest in—or experience with—AI applied to security, agent-based workflows, and SOC automation.Diligence, independence, technical curiosity, and attention to detail.Ability to conduct in-depth investigations, document findings clearly, and escalate issues with the appropriate level of context; awareness of confidentiality and the proper handling of sensitive information.Professional-level English; Ledger operates in an international environment.LocationParis, FranceAddressParisEmployment TypeFull timeLocation TypeHybridDepartmentTechSecurity

ABOUT CFMFounded in 1991, we are a global quantitative and systematic asset management firm applying a scientific approach to finance to develop alternative investment strategies that create value for our clients. We value innovation, dedication, collaboration, and the ability to make an impact. Together, we create a stimulating environment for talented and passionate experts in research, technology, and business to explore new ideas and challenge existing assumptions.YOUR ROLEAre you passionate about application security and ready to serve as a subject matter expert in AI security? In this role, you’ll be instrumental in protecting our low-latency processing systems and trading platforms across diverse environments. Reporting directly to the Director of Application Security, you will work collaboratively with development, infrastructure, and operations teams to embed security into every phase of our process and in the company culture. KEY RESPONSIBILITIES Serve as the internal point of reference and Subject Matter Expert on AI security and cloud applications security. Design, implement, and maintain the essential tools to secure our AI and agentic systems with robust security controls including sandboxes, guardrails, compliance checks, and vulnerability management. Support our development teams in addressing identified findings in our cloud infrastructure (including infrastructure as code), ensuring compliance with secure cloud practices to align with industry standards, and promote a culture of ongoing security enhancement. Participate in design reviews, threat modeling, and architecture assessments to proactively identify and mitigate security risks in new and existing solutions. Establish best practices and policies regarding AI security and communicate them across the company to foster its security culture and to empower our teams to develop cutting hedge AI solutions. Work with our Core and Architecture team to deploy solutions for managing agents’ identities, agent authentication, and access control (role- and attribute-based), both on premises and in cloud environments. Develop, monitor, and report indicators to track security performance and drive continuous improvement. YOUR SKILLS:Proficiency in LLM architecture, embeddings, vector databases, RAG and inference. Hands-on experience with securing MCP servers, skills and agentic coding tools (e.g. Claude Code). Expert in the corresponding OWASP Top 10 for LLMs and OWASP Top 10 for Agentic Applications. Exposure to MLOps pipelines and frameworks for deploying machine learning models. Experience with cloud-based AI/ML services – for example, AWS SageMaker, AWS AI Services (Bedrock, Rekognition, Lex, etc.), Google Vertex AI, or Azure Machine Learning – and knowledge of how to secure data and models on these platforms. Bachelor’s degree (or equivalent practical experience) in Computer Science, Information Security, or a related field. A minimum of 5 years of hands-on experience in application security, with proven expertise securing modern architectures—including cloud environments, containerized applications, serverless platforms, and APIs. Ability to design, configure, implement, and maintain these tools as part of production CI/CD pipelines, ensuring accurate vulnerability detection, low noise, and minimal impact on deployment speed and stability. Proficiency in Linux environments, networking protocols (TCP/IP, UDP, HTTP, HTTPS, SSH). Expert on authentication and authorization protocols including but not limited to SAML, OAuth2, OpenID Connect. Strong coding skills in at least one programming language with the ability to read, analyze, and communicate code vulnerabilities to both technical and non-technical audiences. Clear understanding of cloud architecture fundamentals like load balancers, gateways, compute, storage, serverless, etc. Familiarity with containerization (Docker) and orchestration (Kubernetes, AWS EKS/ECS) security concerns. Knowledge of image vulnerability scanning, Kubernetes network policies, and secrets management in containerized environments is a plus. Excellent written and verbal communication skills, with proven ability to transform complex technical concepts into clear business and security recommendations. Preferred Qualifications:Expertise in cloud security with either AWS, GCP, or Azure, and extensive experience ensuring a cohesive security posture across all environments. Strong background in implementing and managing Infrastructure as Code (IaC) and automation tools (e.g., Terraform, Ansible, CloudFormation). A passion for staying informed about the latest AI security research, tools, and adversarial tactics, techniques and procedures — and applying that knowledge to improve enterprise security. Experience with threat modeling or conducting comprehensive security audits is a plus. EQUAL OPPORTUNITIES STATEMENT We are continuously striving to be an equal opportunity employer and we prohibit any discrimination based on sex, disability, origin, sexual orientation, gender identity, age, race, or religion. We believe that our diversity, breadth of experience, and multiple points of view are among the leading factors in our success. CFM is a signatory of the Women Empowerment Principles.FOLLOW US Follow us on Twitter or LinkedIn or visit our website to find out more about CFM.

Paris Area, FranceSecurity Trust – All Security Trust Roles /Full-time /HybridContentsquare is the all-in-one experience intelligence platform designed to be easily used by anyone who cares about digital journeys. With our flexible and scalable platform, organizations quickly get a deep understanding of their customers’ whole online journey.We are a global leader in the experience analytics space, with a growing presence across 15 offices worldwide. We’re here to stay—and we’re looking for team members who are excited to drive impact and help us scale even further.Our aim is to create an inclusive workplace where everyone learns and succeeds. Contentsquare has built a community of individuals who are daring, understanding, and deliberate. We invite you to join us in making the complex simpler—for our customers, their customers, and each other.Important note: Be careful of scammers pretending to be from Contentsquare. We will never ask for money or contact you through random texts. Any communication from our in house Talent Acquisition team will only ever come from our contentsquare.com or @contentsquare-ext.com domain. For more information, visit our careers blog.Contentsquare is looking for a Junior Security Automation Engineer to join our Development, Security, and Operations Team (DevSecOps). Reporting directly to a Senior Cybersecurity Engineer, you will play a crucial role in scaling our security capabilities by automating security toolings, workflows, and threat detection mechanisms.Contentsquare provides a globally leading SaaS service and commits to the highest security standards for its customers. We are ISO 27001 and ISO 27701 certified and maintain robust security initiatives (SOC 2 Type 2 report, private bug bounty program, SIEM, advanced security awareness, etc.). Working alongside other cybersecurity experts, your mission will be to ensure the integrity of our products and keep our users safe by building automated, resilient, and scalable security defenses.Key ResponsibilitiesAs a core technical member of the DevSecOps Team, you will transition security from manual processes to automated pipelines. Your responsibilities include:AI-Driven Vulnerability Discovery: Develop, orchestrate, and automate AI agent workflows (leveraging LLMs and autonomous security tools) to proactively scan, identify, and validate vulnerabilities across our codebase and infrastructure.Security Tooling Automation: Develop, deploy, and maintain automation scripts and integrations for our security toolstack (e.g., SAST/DAST in CI/CD pipelines, automated in-house scanning capabilities, and CSPM).Vulnerability Management: Automate the tracking, reporting, and follow-up of vulnerability resolution actions across infrastructure and applications.Continuous Improvement: Participate in technical security audits and penetration tests, utilizing the findings to write new automated detection rules.Team Collaboration: Share your knowledge, document automated workflows, and assist engineering teams in adopting secure-by-default and automated practices.Desired Skills and AttributesEducation & ExperienceYou hold a Master’s degree (Bac +5) or equivalent in Computer Science, Cybersecurity, or Software Engineering.You have initial experience (0 to 3 years, including solid internships or work-study programs) focusing on DevSecOps, security engineering, or backend development with a strong security mindset.Technical CompetenciesAutomation & Scripting: Strong proficiency in Python and Shell scripting.AI & Emerging Tech: Basic understanding of integrating AI/LLM/MCP APIs into automated workflows or custom scripts is a strong plus.DevOps & CI/CD Tooling: Hands-on familiarity with modern development ecosystems, particularly GitHub (GitHub Actions), Terraform, ArgoCD, and Ansible.Cloud & Containers: Good understanding of AWS and/or Azure architectures, as well as containerization technologies (Kubernetes, Docker).Security Fundamentals: Strong grasp of cybersecurity concepts and applied methodologies: OWASP Top 10, public key encryption, TLS, IAM, and secure credentials management.Familiarity with our Tech Stack: Exposure to tools like Google SecOps, Crowdstrike, Datadog ASM (WAF), and frameworks like NestJS, Vue.js, or Angular.Soft SkillsYou possess an "automate-first" mindset: if you have to do a manual security task twice, you want to script it the third time.You demonstrate rigor, curiosity, and strong analytical problem-solving skills.You thrive in a collaborative team environment but are fully capable of driving your technical tasks independently.Fluent in English and French (both written and spoken).Why you should join ContentsquareWe invest in our people through career development, mentorship, social events, philanthropic activities, and competitive benefits. We are always assessing the perks we offer to ensure we’re aligned with the employees' needs.Here are a few we want to highlight:- Virtual onboarding, Hackathon, and various opportunities to interact with your team and global colleagues both on and offsite each year- Work flexibility: hybrid and remote work policies- Generous paid time-off policy (every location is different)- Lifestyle allowance- A Culture Crew in every country we’re based in to coordinate regular activities for employees to get to know each other and bond outside of work- Every full-time employee receives stock options, allowing them to share in the company’s success- We have multiple Employee Resource Groups, that offer a safe space for individuals who share common identities, life experiences, or allyship to connect, support one another, and passionately advocate for the issues close to their hearts- And more benefits tailored to each countryContentsquare is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.Your personal data is used by Contentsquare for recruitment purposes only. Read our Job Candidate Privacy Notice to find out more about data protection at Contentsquare and your rights. You can exercise your rights by using our dedicated Data Subject Rights Portal here. Your personal data will be securely stored in our hosting provider’s data center in Oregon (US west). We have implemented appropriate transfer mechanisms under applicable data protection laws.Contentsquare may use AI-assisted tools to help review and screen applications. All decisions involving hiring are made by human reviewers, and your personal data will be processed in accordance with our Candidate Privacy Policy.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Description leboncoin, est le 1er site généraliste de vente entre particuliers en France, leader sur les marchés de l’immobilier et l’automobile, acteur clé sur les biens de consommation de seconde main et sur l’emploi. Chaque mois leboncoin est plébiscité par 30 millions de Français qui apprécient la richesse de son offre et la facilité des échanges qu’il permet au quotidien.leboncoin a été élu Marque préférée des Français dans les catégories “site de seconde main”, “immobilier” et “automobile” en 2026.En tant qu’Ingénieur·e DevSecOps, vous serez responsable de la mise en place et du maintien de fondations sécurisées à travers :Notre cloud (IaaS AWS et différentes solutions SaaS modernes)Notre infrastructure (services standards AWS : EC2, S3, EKS, IAM, ainsi que Datadome et AWS WAF)Nos chaînes de développement (Gerrit, GitHub, Concourse)Nos outils de sécurité et leurs intégrationsVous interviendrez à la fois comme ingénieur·e opérationnel·le et comme conseiller·ère sécurité auprès de nos équipes IT, produit et ingénierie, afin de garantir que les bonnes pratiques de sécurité soient intégrées dans la conception, la construction et l’exploitation de tous les systèmes du groupe Leboncoin.Ce poste est une opportunité exceptionnelle de renforcer la sécurité globale du Système d’Information et des applications de Leboncoin. Vous couvrirez les domaines de la sécurité du cloud et de l’infrastructure, de la gestion des identités et des accès (IAM), ainsi que la sécurité des pipelines CI/CD.RequirementsMinimum 5 ans d’expérience en sécurité cloud, sécurité d’infrastructure ou DevSecOpsSolide connaissance d’AWS, Kubernetes et des suites d’outils CI/CDExpérience pratique avec l’Infrastructure-as-Code (Terraform, Ansible, etc.), le scripting (au moins un langage) et l’automatisationBonne compréhension des concepts IAM, des protocoles d’authentification (SAML, OAuth2, OIDC) et de la gestion des accès privilégiésBonne connaissance de la sécurité applicative et des vulnérabilités courantes (OWASP Top 10, SANS Top 25)Expérience d’intégration d’outils de sécurité dans les pipelinesExpérience en développement et déploiement de scripts et de pluginsExcellentes compétences en communication et en négociation pour conseiller efficacement les équipes d’ingénierieMaîtrise du français et anglais professionnelAtouts supplémentairesExpérience préalable en développementExpérience dans un environnement marketplace, e-commerce ou plateforme web à fort traficConnaissance des réglementations européennes (NIS2, RGPD)ResponsibilitiesSécurité Cloud & InfrastructureDéfinir et faire appliquer les standards d’architecture de sécurité pour le cloud (AWS)Auditer le code d’infrastructure (IaC) pour détecter les erreurs de configuration et les vulnérabilités, et promouvoir les meilleures pratiques de sécuritéCollaborer avec les équipes infrastructure pour implémenter des guides de durcissement et concevoir des réseaux sécurisésDevSecOps & Sécurité des pipelinesIntégrer des outils et contrôles de sécurité dans l’infrastructure, les pipelines CI/CD (SAST, SCA, détection de secrets, sécurité des conteneurs) et les services IT de LeboncoinAutomatiser les tests de sécurité et les vérifications de conformité dans les workflows de développementTravailler avec les développeurs pour concevoir des modèles de code sécurisé et des modèles de menaceGestion des identités et des accès (IAM)Définir, recommander et appliquer des processus IAM robustes à l’échelle de Leboncoin (cycle de vie des collaborateurs, accès privilégiés, MFA, séparation des rôles)Mettre en place une gouvernance IAM et des contrôles techniques solides (moindre privilège, RBAC/ABAC, accès temporaire “just-in-time”)Outils de sécurité & IntégrationParticiper à l’intégration ou au développement d’outils de sécurité au sein de l’infrastructure IT et cloud de Leboncoin (intégration SIEM/SOAR, scanners de vulnérabilités, gestionnaires de secrets, outils IAM)Garantir la maintenance, la supervision et la montée en charge de ces outilsConseil en sécuritéAgir en tant que conseiller·ère sécurité auprès des équipes produit, infrastructure et métierRevoir les conceptions et architecturesFormuler des recommandations concrètes et arbitrer les compromisRédiger et diffuser des guides de sécuritéBonnes pratiques et modèles réutilisablesGestion des incidents & des risquesAssister l’équipe de détection et de réponse aux incidents en apportant une expertise technique et architecturale, et contribuer aux post-mortems pour améliorer les processusParticiper au service d’astreinte sécuritéFournir un appui à l’évaluation des risques pour les nouveaux projets ou les intégrations de prestataires externesBenefitsDes conditions de travail agréables (locaux, télétravail…)Une rémunération attractive Une carte tickets restaurants et une couverture mutuelle et prévoyance efficace et compétitiveChez leboncoin, nous sommes convaincus que la diversité des parcours, des expériences et des points de vue est une richesse essentielle. Cet engagement se reflète pleinement dans notre processus de recrutement : nous évaluons chaque candidature uniquement au regard des compétences, de l’expérience et de la motivation, sans aucune forme de discrimination.Si vous avez besoin d’un aménagement spécifique dans le cadre du processus de recrutement, n’hésitez pas à nous en faire part : nous serons ravis de vous accompagner.

Health can’t wait. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t.Alan exists to end the wait.Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way.So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.We are on an incredible journey to build a global leading company, with a unique culture. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached 800M+ in ARR.Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond.The team and your missionsYou will lead Alan's Security team, a highly technical group operating across 10+ countries in a regulated health insurance environment. As Security Lead, your missions span four core areas:Lead and grow the security team: Coach, structure, and elevate a team of security experts. Set clear priorities, define ownership, and create conditions for genuine professional growth.Own security in the AI era: Define Alan's posture on AI-driven threats and opportunities. Build frameworks that let product and engineering teams ship AI-powered features safely and at speed.Scale security across 10+ countries: Own the ISMS and certification programme (ISO 27001), navigate a complex multi-regulatory environment (DORA, HDS, RGPD, NIS2, PGSSI-S), and ensure Alan's security programme keeps pace with its geographic expansion.Build and evolve Alan's security strategy: Position security as a long-term business asset and trust-builder for members, regulators, and partners. Align Legal, DPO, Risk, Engineering, and Product on security requirements, and build a security culture that empowers rather than restricts.The challengeAlan is a fast-growing health insurer operating in a uniquely complex environment. The challenges you will navigate include:A shifting threat landscape: AI is reshaping both attack vectors and defensive possibilities. You will need a clear point of view on LLM security, agent risks, and AI governance, and the ability to translate that into concrete, actionable priorities.Multi-country regulatory complexity: Operating across 10+ countries means managing a dense, evolving regulatory stack (DORA, HDS, RGPD, NIS2, PGSSI-S) while keeping the business moving. You will need to translate regulatory requirements into technical controls without creating bottlenecks.Health sector specifics: Alan handles sensitive health data at scale. This comes with sector-specific requirements (ANS framework, CERT Santé, HDS) that demand both technical precision and operational rigor.Influencing at scale without direct authority: Security touches every function. Your ability to align Legal, DPO, Risk, Engineering, Product, and Operations, and make them come to you early, will be as important as your technical depth.Running security as a living programme, not a compliance exercise: The goal is not to pass audits. It is to build a programme that feeds real decisions, scales with the company, and earns genuine trust.Who we are looking forProven experience leading a security (or security-adjacent) team, with concrete examples of people development and growthAt least one full ISO 27001 certification or recertification cycle led end-to-endSolid understanding of the regulatory stack relevant to Alan's context: DORA, HDS, RGPD, NIS2, PGSSI-SExperience running security risk cartography, ideally with EBIOS RM- Experience conducting vendor security assessments and defining contractual security requirementsClear understanding of AI security: LLM threats, agent risks, AI governance frameworks (OWASP LLM Top 10, MITRE ATLAS, EU AI Act)Full professional fluency in English required; French is a plusBonus: experience in a regulated health sector environment (ANS framework, CERT Santé, HDS)This position targets level F+ on our level grid.How we workLocation: You must be legally eligible to work from France. We offer remote work flexibility, but we value in-person collaboration Important note: we hire people, not roles.If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success.If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements?Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application! Check out our About Alan and Career pages, as well as our Medium, blog and Glassdoor page for more info.You want to know more about Alan? Perks & Benefits: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers.A strong culture: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to workLocationParis, FranceEmployment TypeFull timeLocation TypeHybridDepartmentCorporate

Position purpose: The Cybersecurity Officer is responsible for:Participating to the definition and implementation of the IT security strategy and policies under the coordination of Cybersecurity leaderEnsuring Cybersecurity compliance of IT Operations across all regions with the business requirementsControlling and reporting permanently the IT operations activities compliance based on the related security requirementsConnecting with local regulations and overseeing the data protection within the organizationCybersecurity communication, leading investigations and audits, awareness training for all PR employeesAnalyzing permanently risks and reporting to the Head of CybersecurityProviding cybers security technical support Level 2/Level 3The main responsibilities are:IT Operations security policies, standards and proceduresContributing to the global security strategy and policies definition and implementationOverseeing and controlling the information security policy and data protection policy implementationContributing to the definition and implementation of Business Continuity Plan and Disaster Recovery Plan by collaborating with other stakeholders within IT Operations and BusinessEnsuring the alignment between the defined procedures and security management tools and the security & objectivesContributing to the communication of security policies, standards and procedures of IT Operations to internal and external stakeholdersSecurity compliance control and reportingAnalyzing SOC reporting for compliance monitoring and bringing recommendations or alarming top management about IT security flawsRolling out IT Operations security risk evaluation and impacts analysisRaising alarms to Cybersecurity leader, management team and related business/subsidiaries whereas a severe incident impacting the IT security is detectedReporting to the Cybersecurity leader and the Group Security Steering Committee the status of the security maturity with action plan or remediation planContributing the internal and external auditsCoordination and IT security monitoringCoordinating and following up remediation plans implementation with key indicatorsParticipating to the internal and external events related to the information securityConnection with local Cybersecurity policies, requirements and regulationsUnderstanding the local cybersecurity policies, requirements and regulations about security, data protection and data privacy regulationsEnsuring the cybersecurity compliance of IT Operations with the local requirementCommunication, training & awarenessResponsible for the IT Operations security communication content preparation, validation and distribution to all stakeholders (internal and external)Ensuring the definition and roll out of communication and awareness training plan/program towards all PR employees and their consistencyTechnology watching Following up security evolutions, major trends and best practices on technology, solutions and regulationsWorking closely with security vendors on new types of cyber-crime or computer viruses to help the IT Operations keep the security systems up to dateCyber security technical support Contributing to critical incidents, crisis management and mitigation plansProviding technical support Level 2/Level 3The profile required is:Education required: BAC+5 (engineering or business school / university specialized of information security and/or telecom, information system and network security, security, information encryption and coding, …)Experience / Background:5 + years of experience in a related areaMust have experience dealing with various levels within companyProven track record of institutionalizing leading-practice methodologies and processesSpecific Expertise: Auditor/Lead Auditor ISO 27001 Implementer/Lead ISO 27001Language required: Fluent in EnglishJob Posting End Date:Target Hire Date:2021-09-01-07:00Target End Date:SummaryLocation: ParisType: Full time

What You'll Do:You'll join Criteo's Application & Product Security team, helping secure the products we build and operate. Working closely with Product Engineering, Platform teams, and other Security teams, you'll contribute to the security strategy of your domain while remaining hands-on. This role combines technical expertise, engineering execution, and cross-functional collaboration.Partner with Product and Platform teams to design and build secure systems and servicesAct as a trusted security advisor, guiding teams on secure design, threat modelling, and vulnerability managementIdentify, assess, prioritise, and help remediate application security risks across the organisationContribute hands-on to security initiatives, including architecture reviews, security tooling, automation, and incident response activitiesHelp define and evolve security standards, best practices, and KPIs to continuously improve the security posture of your domainDrive the adoption of security-by-design and shift-left security practices throughout the software development lifecycleLead complex technical projects and security initiatives, collaborating with stakeholders across multiple teamsSupport security awareness efforts by sharing knowledge, mentoring peers, and promoting secure engineering practices across the organisationCollaborate with Security, Product, and Platform teams to improve security processes, tooling, and operational excellenceWho You Are:You bring experience in Security Engineering, or have significantly contributed to application or product security initiatives in previous rolesYou have a background in Product Engineering or SRE / Platform Engineering and a strong understanding of modern software development practicesYou have experience leading complex technical projects and driving cross-functional initiatives in large-scale environmentsYou are comfortable acting as a subject matter expert on security topics and advising teams on risks, trade-offs, and best practicesYou have experience securing distributed systems, cloud-native environments, and modern application architecturesYou enjoy combining hands-on engineering, problem-solving, and technical leadershipYou influence without authority, building trust and alignment across diverse stakeholders and teamsYou demonstrate strong ownership, accountability, and sound judgement when handling sensitive security topicsYou are passionate about improving security through scalable solutions, automation, and collaborationWe acknowledge that many candidates may not meet every single role requirement listed above. If your experience looks a little different from our requirements but you believe that you can still bring value to the role, we’d love to see your application!Who We Are:We’re Criteo, the Commerce Intelligence Platform. Criteo helps businesses turn shopper signals into commerce outcomes while delivering more relevant experiences for shoppers. We use proprietary commerce intelligence and AI decisioning to drive relevance for shoppers and performance for businesses.At Criteo, our culture is as unique as it is diverse. From our offices across the globe or from the comfort of home, our 3,600 Criteos collaborate together to build an open, impactful, and forward-thinking environment.We foster a workplace where everyone is valued, and employment decisions are based solely on skills, qualifications, and business needs—never on non-job-related factors or legally protected characteristics.What We Offer:🏢 Ways of working – Our hybrid model blends home with in-office experiences, making space for both. 📈 Grow with us – Learning, mentorship & career development programs. 💪 Your wellbeing matters – Health benefits, wellness perks & mental health support. 🤝 A team that cares – Diverse, inclusive, and globally connected. 💸 Fair pay & perks – Attractive salary, with performance-based rewards and family-friendly policies, plus the potential for equity depending on role and level. Additional benefits may vary depending on the country where you work and the nature of your employment with Criteo. SummaryLocation: ParisType: Full time

ParisTech – Engineering /Permanent contract /HybridVestiaire Collective is the leading global platform for desirable pre-loved fashion and a pioneer in transforming how people consume fashion.Our mission is simple: make circular fashion the norm, not the exception.Through technology, expertise, and a highly engaged global community, we enable millions of people to buy and sell fashion in a more sustainable way.Founded in Paris in 2009, Vestiaire Collective is now a globally scaled marketplace with offices in Paris, London, Berlin, New York, Singapore, and Ho Chi Minh City, and logistics hubs across Europe, Asia, and the US.Today, we are a team of around 600 people from over 50 nationalities, united by a shared ambition: to drive meaningful change in the fashion industry.Our values, Activism, Transparency, Dedication, Greatness, and Collective, shape how we build, collaborate, and grow every day.Please upload your CVs in English About the role : As a Senior Security Analyst at Vestiaire Collective, you will be part of our Security team. Your objective will be to provide a safe, secure, and trustworthy experience for our users, while safeguarding their privacy and personal data, as well as protecting our company assets and internal employees. Additionally, you will ensure compliance with regulatory requirements.This role is focused on security operations, risk, and assurance: you will be the person who keeps continuous watch over our security posture — monitoring and investigating alerts, driving vulnerabilities through to remediation, supporting incident response, and producing the evidence and metrics that demonstrate our security and compliance to auditors, regulators, and leadership. Reporting to the Head of Security, you will work alongside a talented team of security engineers and collaborate closely with engineering teams and other stakeholders such as legal, finance, and corporate IT.You will work daily with our security stack: Datadog (SIEM), SentinelOne (EDR), Upwind (CSPM), Cloudflare (WAF and Cloudflare One), and Grafana/Prometheus, on top of our AWS and GCP cloud environments.What you will do : Operate and continuously improve our security monitoring: triage and investigate alerts across our detection stack (Datadog SIEM, SentinelOne EDR, Cloudflare), tune detections to reduce noise, and escalate confirmed threats.Review and prioritize cloud security posture findings (Upwind CSPM) across our AWS and GCP environments, and drive misconfigurations through to resolution with the relevant teams.Own the vulnerability management lifecycle: consolidate findings from penetration tests, application security reviews, and our bug bounty program; validate and prioritize them; and drive remediation with engineering teams against defined SLAs.Triage incoming bug bounty submissions: reproduce and assess reported issues, determine severity, and coordinate fixes with the relevant code owners.Support incident response from detection to closure: first-line investigation, coordination during incidents, documentation, and post-incident follow-up actions.Support audit and assurance activities: prepare and maintain evidence for external audits, run periodic access reviews (joiners/movers/leavers, privileged access), and keep compliance documentation up to date.Contribute to security metrics and reporting: maintain and enrich the KPIs and dashboards (Grafana) we use to report our security posture to leadership.Assess third-party vendors and tools from a security and data-protection standpoint.Handle day-to-day security requests from across the company (reported phishing, the security inbox, employee questions) and deliver security awareness initiatives to promote a security-conscious culture.Who you are :Proven experience (3+ years) in a security analyst, SOC, or security operations role, preferably in a fast-paced startup/scaleup environment.Strong analytical and problem-solving abilities, rigorous documentation habits, and the ability to communicate clearly with both technical and non-technical stakeholders.Hands-on experience with SIEM and log analysis platforms (e.g., Datadog, Splunk, Elastic) for alert triage, threat detection, and investigation; familiarity with EDR tooling (e.g., SentinelOne, CrowdStrike) is a strong plus.Working familiarity with cloud environments (AWS and/or GCP) and cloud security fundamentals - enough to understand, prioritize, and follow up on CSPM and WAF findings.Solid understanding of vulnerability management and common application threats (e.g., OWASP Top 10) - enough to validate findings, assess real-world impact, and discuss remediation credibly with engineers.Understanding of compliance frameworks and regulations (e.g., ISO 27001, PCI DSS, SOC 2, GDPR, DSA), with the ability to translate requirements into practical controls, procedures, and audit evidence.Scripting or query skills (e.g., Python, SQL), for automating routine analysis and digging into data during investigations.Ability to adapt to a rapidly changing environment and manage multiple priorities.NICE TO HAVE: Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Relevant certifications (e.g., CompTIA Security+/CySA+, GIAC GCIH/GCIA, CISA, ISO 27001 Lead Auditor/Implementer) are a plus.Our Tech Stacks includesDatadog SIEMUpwind CSPMCloudflare (WAF, One)SentinelOneAWS, GCPGrafana, PrometheusSnowflakeTableauWhat We OfferPurpose-driven work at scaleJoin a company reshaping the fashion industry towards circularity, you directly contributes to reducing waste and extending the life of luxury items.High-impact scope & ownershipWork on products used globally, where your decisions have immediate, measurable impact on millions of users across 70+ countries.A truly international environmentCollaborate with a diverse team of 50+ nationalities across Paris, London, Berlin, New York, Singapore, and Ho Chi Minh City.Career acceleration in a fast-moving scale-upTake ownership early, grow fast, and shape your path, as an expert or a future leader.Learning & growth as a priorityDedicated budget, continuous feedback culture, and opportunities to work on cutting-edge topics (AI, marketplace dynamics, scalability, etc.).Flexible ways of workingHybrid model (typically 2 days remote per week), with trust and autonomy at the core of how we operate.Give back through action2 paid days per year to support a cause of your choice and actively contribute to positive impact beyond your day-to-day role.Competitive compensation & benefitsIncluding bonus, health coverage, lunch vouchers, Gym-Pass, and additional legal perks depending on your location.Research shows that candidates from underrepresented backgrounds including women, people with disabilities, and other marginalized communities, are less likely to apply unless they meet 100% of the criteria.At Vestiaire Collective, we believe diversity drives better decisions, stronger products, and more meaningful impact.If this role excites you but your experience doesn’t align perfectly, we still encourage you to apply, your perspective could be exactly what we’re looking for.Vestiaire Collective is proud to be an equal opportunity employer.PS: We take candidate experience seriously, and your safety too !Vestiaire Collective will only contact you through official email addresses ending in @vestiairecollective.com or [email protected].We will never:Contact you via WhatsApp, Telegram, or similar platformsAsk for payment or banking information at any stage of the processIf you receive a suspicious message, please report it to: [email protected]We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job ID: R_357755Company: Marsh McLennanLocation: 5 Place des Pyramides, Tour Ariane, 92800 Paris, FranceJob Type: RegularCategory: Customer ServicesIndustry: Real EstateSalary: 47000Posted Date: 2026-07-27Nous recherchons un conseiller spécialisé en responsabilité civile pour notre bureau basé à la Défense.Nous comptons sur vous pour :Gérer, développer et monitorer un portefeuille de clients composés d’entreprises nationales et internationales dont le chiffre d’affaires est compris entre 30m et 3md ;Comprendre, analyser, synthétiser les besoins, les enjeux et les risques de vos clients ;Réaliser des études techniques et mettre en place les solutions répondant aux besoins des clients et des prospects ;Identifier, appréhender le marché, négocier les placements et conditions avec les assureurs et clients (y compris renouvellements, extensions de garanties, affaires nouvelles…) ;Rédiger des pièces contractuelles ;Adapter techniquement et d’un point de vue tarifaire les contrats au regard de l’évolution du métier, des exigences du client et des évolutions du risque ;Instaurer une relation de confiance avec les Clients/Prospects et les partenaires stratégiques Assureurs, créer un relationnel positif avec les Chargés de Clientèle ;Participer au développement commercial par le biais d’appels d’offres et d’études diverses en relation avec d’autres départements et bureaux au sein du groupe.Prérequis : 5 à 10 ans d’expérience en Responsabilité Civile dans le courtage (placement), en compagnie d’assurance (souscription) et/ou en entreprise (responsable assurance, juridique) ;De formation supérieure juridique ou équivalent ;Faire preuve d’aisance relationnelle et avoir la capacité à travailler en équipe ;Aimer approfondir les sujets et propension à l’innovation ;Être autonome, rigoureux(se), porté(e) par le sens des responsabilités ;Avoir le gout de la négociation et le sens de la relation client ;Avoir une grande capacité d’écoute et de synthèse ;Maîtriser les mécanismes des programmes internationaux.Ce qui fera la différence :Votre motivation et votre état d’esprit ;Votre anglais courant à l’écrit comme à l’oral ;Votre forte appétence pour le développement commercial. Marsh Risk is a business of Marsh (NYSE: MRSH), a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information about Marsh Risk, visit marsh.com, or follow us on LinkedIn and X.Marsh is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.Skillsresponsabilité civilegestion de portefeuillemécanismes des programmes internationauxanalyse des besoinsdéveloppement commercialnégociationrédaction contractuellerelation clientcapacité d'écoutesynthesisautonomieinnovation

Unlock the potential of cloud security as a Cloud Security / NetSec Engineer (AWS), where your expertise will drive innovation and protection in a thriving digital landscape. This remote opportunity based in Paris is ideal for a passionate professional ready to enhance cloud security practices while working with AWS products. You will contribute to building resilient and secure cloud environments. Key skills required for this role include: - Extensive knowledge of AWS security services, architecture, and compliance frameworks - Proficiency in implementing network security protocols and threat detection measures - Experience with security incident response and risk management - Understanding of encryption technologies and secure coding practices - Strong analytical and problem-solving abilities This is an excellent opportunity for a candidate who thrives in a collaborative and growth-oriented environment. If you are committed to advancing cloud security and enjoy working with leading-edge technologies, we encourage you to apply for this role. Take the next step in your career by bringing your unique perspective and skills to this important position.

Le poste :leboncoin, est le 1er site généraliste de vente entre particuliers en France, leader sur les marchés de l’immobilier et l’automobile, acteur clé sur les biens de consommation de seconde main et sur l’emploi. Chaque mois leboncoin est plébiscité par 30 millions de Français qui apprécient la richesse de son offre et la facilité des échanges qu’il permet au quotidien.leboncoin a été élu Marque préférée des Français dans les catégories “site de seconde main”, “immobilier” et “automobile” en 2026.Dans le cadre de la construction de notre future organisation cybersécurité, nous renforçons aujourd'hui notre capacité Product Security afin d'accompagner les équipes de développement dans la conception et la livraison de produits toujours plus sécurisés.Vos tâches :Accompagner les Feature TeamsVous deviendrez un partenaire cybersécurité privilégié des Feature Teams.Vous les accompagnerez dans :la conception sécurisée de nouvelles fonctionnalités les analyses de risques les revues d'architecture les Threat Modeling les arbitrages sécurité les choix techniques liés à la sécurité la définition de solutions pragmatiques conciliant sécurité et rapidité de développementVous travaillerez selon un modèle de Business Security Partner.Votre rôle sera d'être identifié par les feature teams et les équipes produit comme leur interlocuteur cybersécurité privilégié.Développer le Secure by DesignVous participerez à l'amélioration continue de notre Secure Software Development Lifecycle.Vous contribuerez notamment à :développer nos standards de sécurité rédiger des guidelines techniques définir des exigences de sécurité réutilisables promouvoir les bonnes pratiques Secure Coding favoriser l’adoption des contrôles de sécurité automatisés par les équipes, en lien avec les équipes responsables des plateformes et outils de sécuritépromouvoir une approche Secure by Default auprès des équipes ProduitVotre objectif sera de réduire durablement les causes récurrentes de vulnérabilités plutôt que de traiter uniquement leurs conséquences.Contribuer à l’amélioration continue des pratiques Product SecurityVous rejoignez une organisation en pleine évolution.Vous participerez directement à la construction de notre future capacité Product Security.Vous contribuerez notamment à :structurer les processus Product Security ;améliorer notre Secure SDLC ;capitaliser les retours d'expérience ;contribuer à diffuser une véritable culture Secure by Design.Valoriser les résultats des activités offensivesVous travaillerez en étroite collaboration avec notre ingénieur Offensive Security afin de transformer les résultats des activités offensives en améliorations concrètes des produits.Vous ne serez pas responsable de la réalisation des activités offensives (tests d'intrusion, campagnes Bug Bounty, recherche de vulnérabilités).Votre responsabilité sera de faire en sorte que les enseignements issus de ces activités se traduisent en améliorations durables des produits et des pratiques de développement.Participer à la sécurisation des usages de l'Intelligence ArtificielleL'intelligence artificielle est déjà largement utilisée chez leboncoin, aussi bien dans nos produits que dans les pratiques quotidiennes de développement logiciel.Vous participerez progressivement à la sécurisation de ces usages.Vous contribuerez notamment à :accompagner les équipes Produit dans les analyses de risques liées aux nouvelles fonctionnalités reposant sur l'IA ;participer aux revues de sécurité des nouveaux cas d'usage IA ;contribuer à la définition de bonnes pratiques de développement sécurisé intégrant les assistants de développement basés sur l'IA ;suivre l'évolution des risques liés aux LLM et aux applications intégrant des modèles d'IA.Votre rôle dans l'équipeVous rejoindrez une équipe cybersécurité en pleine construction.Vous travaillerez en étroite collaboration avec :notre ingénieur Offensive Security ;les équipes Cyber Defense ;Notre GRC Manager ;les équipes Privacy.Vous exercerez un leadership d'influence auprès des équipes Produit et Engineering.Ce poste ne comporte pas de management hiérarchique.En revanche, vous serez progressivement reconnu comme l'un des référents Product Security de leboncoin.Votre profil :Nous recherchons une personne possédant une solide culture du développement logiciel et de la sécurité applicative.Vous disposez d'une expérience significative dans plusieurs des domaines suivants :Product Security ou Application Security ;Secure Software Development Lifecycle (Secure SDLC) ;Threat Modeling ou revues d'architecture ;Secure Coding et principales vulnérabilités applicatives (OWASP Top 10).API SecurityUne expérience de développement logiciel constitue un véritable atout.Vous aimez travailler au contact des équipes de développement et êtes capable de participer aux discussions techniques et d'architecture.Vous savez lire et comprendre du code, identifier les principaux risques applicatifs et accompagner les développeurs dans la recherche de solutions pragmatiques.Vous pourrez être amené à réaliser ponctuellement des analyses techniques de sécurité applicative lorsque cela est nécessaire, notamment :revues de code security testing applicatif exploitation des résultats SAST, DAST, SCA, IaC Scanning ou Secrets Detection analyses de sécurité applicative sur des fonctionnalités critiquesLe Product Security Engineer n'a pas vocation à réaliser l'ensemble des activités de sécurité applicative des Feature Teams. Son rôle est de permettre aux équipes de développer des produits plus sécurisés de manière autonome, en apportant son expertise sur les sujets à plus fort enjeu et en contribuant à l'amélioration continue du Secure Software Development Lifecycle. Une expérience sur les sujets suivants constituera un plus :utilisation de Claude Code, GitHub Copilot, Cursor ou d'autres assistants IA pour le développement logiciel Secure AI Development ;LLM Security ;AI Risk Assessment ;Prompt Injection ;utilisation de l'IA pour accélérer les activités de sécurité applicative.Nous ne recherchons pas un expert de l'IA, mais une personne curieuse, capable d'accompagner les équipes dans l'adoption sécurisée de ces nouvelles pratiques.Ce que nous apprécierons particulièrement :Vous aimez travailler au contact des développeursVous savez lire et comprendre du codeVous appréciez les discussions d'architectureVous aimez autant résoudre un problème technique que construire une bonne pratique réutilisableVous êtes pragmatiqueVous privilégiez les solutions plutôt que les blocagesVous aimez transmettre vos connaissancesVous êtes convaincu que la meilleure sécurité est celle qui s'intègre naturellement dans le quotidien des équipes de développementNos bénéfices :Vous participerez directement à la construction de la future capacité Product Security de l'une des plus importantes plateformes numériques françaisesVous travaillerez dans un environnement Cloud Native moderneVous contribuerez à sécuriser des services utilisés quotidiennement par plusieurs millions d'utilisateursVous évoluerez dans un environnement où l'intelligence artificielle transforme déjà les produits et les pratiques de développement, et où vous aurez l'opportunité de contribuer à définir les bonnes pratiques de sécurité associéesEnfin, vous rejoindrez une équipe cybersécurité en pleine construction où chacun a un impact direct sur l'organisation, les pratiques et la stratégie de sécurité de l'entrepriseSi vous aimez autant le code que la sécurité, autant accompagner les développeurs que réaliser des analyses techniques, et si vous souhaitez contribuer à construire une fonction Product Security moderne au sein d'une entreprise technologique de premier plan, ce poste est fait pour vous-----------------------------------------------------------------------------------------------------Des conditions de travail agréables (locaux modernes au centre de Paris, télétravail…)Une rémunération attractive (fixe, et participation)Des possibilités de développement professionnel rapides et personnaliséesUne carte tickets restaurantsUne couverture mutuelle et prévoyance efficace et compétitiveChez leboncoin, nous sommes convaincus que la diversité des parcours, des expériences et des points de vue est une richesse essentielle. Cet engagement se reflète pleinement dans notre processus de recrutement : nous évaluons chaque candidature uniquement au regard des compétences, de l’expérience et de la motivation, sans aucune forme de discrimination.Si vous avez besoin d’un aménagement spécifique dans le cadre du processus de recrutement, n’hésitez pas à nous en faire part : nous serons ravis de vous accompagner.

About MistralMistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.Role summaryAs a Platform Security Engineer on the Security team, you will architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. Security is not a gate but an enabler, and you will embed robust controls into our continuous integration and deployment pipelines, infrastructure environments, and developer workflows to protect our systems without sacrificing velocity.Your role exists to ensure that our research and engineering teams can move fast while staying secure. You will shape how security integrates with every layer of our stack, from code to cloud, making secure practices invisible to developers and automatic by default.What you will doDrive threat modeling and risk prioritization exercises as the security counterpart in system-design reviews for core infrastructure and new products.Own end-to-end vulnerability management across continuous integration and deployment pipelines and runtime environments, covering infrastructure and applications.Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems.Define and enforce Infrastructure-as-Code security by building robust guardrails and integrating policy-as-code directly into deployment pipelines.Design and execute a comprehensive security tooling strategy, managing solutions for cloud-native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking.Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture.What we're looking for:Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast-scaling environment.Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure-as-Code across major cloud providers.Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows.Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling.Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction.What We OfferWe offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.For the most up-to-date details on benefits available in your location, please refer to our Benefits page.Privacy PolicyYour privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.LocationParisEmployment TypeFull timeDepartmentEngineering & Infra

Imaginez, transformez et impactez le mondepositivement : venez vivre au cœur du changement en tant que membre actif et spécialisé dans les problématiques de sécurité de l’information.Dans ce cadre, nous recherchons un Commercial pour intégrer nos équipes Cyber pour contribuer activement aux différentes activités en cours et participer au développement de nos capacités de l’ensemble de nos lignes de services.Vos responsabilités seront multiples, et décrites ci-dessous :Votre rôle est à la croisée de chemins entre la vente complexe, la compréhension de nos institutions et l’expertise du domaine de la Cyber. Vos missions seront les suivantes :1. Développer le business cyber sur un portefeuille de comptes du Secteur Public :• Porter la responsabilité du chiffre (pipeline, bookings, revenus) sur un ou plusieurs comptes stratégiques• Co-définir et exécuter le plan de compte Cyber avec le Client Account Lead et le Security Account Lead (priorités, portefeuille d’offres, calendrier d’actions)• Piloter le pipe dans le CRM : qualification, priorisation, prévisions fiables (forecast), hygiène des opportunités et rigueur de conversion par étape• Orchestrer les forces internes (conseil, delivery, ingénierie, alliances, juridique, finance, marketing) pour adresser les besoins clients et maximiser l’attach/cross-sell• Développer et entretenir sur le long terme des relations C-level (CISO, CIO, COO, CFO) et influenceurs clés (Risk, Compliance, Achats)2. Conduire les cycles de vente complexes (origination closing) et comprendre les spécificités du secteur public :• Réponses aux appels d’offres des Marchés Publics :Veille et analyse, évaluation de la pertinence d’y répondre en qualifiant les opportunités (valeur, différenciation, sponsors, concurrence, critères de décision)Pilotage de la réponse : accompagner les équipes opérationnelles sur le la construction de l’offre commerciale : cadrage du besoin, solutioning, staffing, estimation des charges, calendrier et gouvernance de réponseElaborer la proposition de valeur, modéliser le business case, structurer le contrat (forfait, régie, managed services/ARR), sécuriser la margeConduire la soutenance : narratif exécutif, démonstrations, POC, références, ROI et plan de réduction des risques• Maitriser les cycles de vente long et gérer des cycles de décisions dans la durée : conditions commerciales, SLA, pénalités, MSA, conformité réglementaire (DORA, NIS2, RGPD)• Connaissance des normes et maitrise des notions et organismes clés : ANSSI, SecNumCloud, etc• Relations institutionnelles : entretenir des liens avec les organismes régulateurs et les centrales d’achat (UGAP par exemple)En tant que commercial cyber pour le secteur public, vous utiliserez votre expertise sectorielle pour conseiller les clients dans l’élaboration, la mise en œuvre et la gestion de solution de cyber sécurité. Vous intègrerez une équipe dynamique, polyvalente, ambitieuse et en pleine croissance, et participerez à la vente de projets de transformation et d’innovation.Formation commerciale ou ingénieur Bac+5 ;Expérience démontrée dans la création et la gestion de partenariats stratégiques avec des entreprises technologiques de premier plan ;Culture de cyber sécurité démontrée et compréhension de l'écosystème Cyber, des solutions et des offres ;Solides compétences en communication et en négociation, avec la capacité de travailler efficacement avec des équipes multifonctionnelles ;Résilience, rigueur et force de travail ;Capacité à travailler de manière autonome, tout en étant un contributeur efficace au sein d'une équipe interfonctionnelle.A propos de nous :Accenture, c'est une communauté de plus de 730 000 talents et une mission commune: réaliser la promesse technologique alliée à l’ingéniosité humaine. Dans un monde en perpétuel changement, nous accélérons la transformation des plus grandes entreprises, de la stratégie à la réalisation des projets, à l’aide des technologies de demain et dynamisons leur croissance grâce à l'expertise multi-sectorielle de nos experts.Nos recrutements sont fondés sur les compétences, sans distinction d’origine, d’âge, ou de genre et tous nos postes sont ouverts aux personnes en situation de handicap.About AccentureAccenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360 value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360 value we create for our clients, each other, our shareholders, partners and communities.Visit us at Déclaration d'égalité des chances en matière d'emploiNous pensons que personne ne devrait être discriminé en raison de ses différences. Toutes les décisions d'embauche doivent être prises sans distinction d'âge, d'origine ethnique, de croyance, de couleur, de religion, de sexe, d'origine nationale, d'ascendance, de handicap, de statut d'ancien combattant, d'orientation sexuelle, d'identité ou d'expression de genre, d'informations génétiques, de statut matrimonial, de citoyenneté ou de tout autre critère protégé par la loi applicable. Notre riche diversité nous rend plus innovants, plus compétitifs et plus créatifs, ce qui nous permet de mieux servir nos clients et nos communautés.SummaryLocation: ParisType: Full time

Informations générales Entité CACEIS est un établissement bancaire, filiale du groupe Crédit Agricole, spécialisé dans les services financiers aux sociétés de gestion et investisseurs institutionnels.Présent en Europe, en Amérique du Nord, en Amérique du Sud et en Asie, CACEIS propose une gamme complète de produits et services : exécution, compensation, change, prêt-emprunt de titres, conservation d'actifs, banque dépositaire et administration de fonds, support à la distribution des fonds, solutions de middle-Office et services aux émetteurs.CACEIS est un consolidateur du marché européen de l'asset servicing et affiche une activité en croissance régulière. Le Groupe détient près de 5 300 milliards d'euros d'actifs en conservation et près de 3 400 milliards d'euros d'encours sous administration (chiffres au 31 décembre 2024). En agissant chaque jour dans l'intérêt de la société, nous sommes un groupe engagé en faveur des diversités et de l'inclusion et plaçons l'humain au cœur de toutes nos transformations. Tous nos postes sont ouverts aux personnes en situation de handicap. Référence 2026-112661 Date de parution 27/07/2026 Description du posteType de métierTypes de métiers Crédit Agricole S.A. - IT, Digital et DataIntitulé du posteGroup Manager Infrastructure Architecture, IT Resilience & Security H/FType de contratCDIPoste avec management OuiCadre / Non CadreCadreMissionsEn tant qu’expert des infrastructures IT, vous aimez concevoir des architectures robustes, sécurisées et résilientes dans des environnements complexes et exigeants. Vous souhaitez avoir un impact concret sur la continuité d’activité, la sécurité et la performance du système d’information, au cœur d’une organisation internationale et en forte transformation. Ce poste vous offre une vision stratégique et transverse sur l’ensemble des infrastructures CACEIS, dans un contexte multi-fournisseurs et multi-environnements (on-premises, cloud, services externalisés).VOTRE EQUIPE : Vous rejoignez la DSI de CACEIS, au sein du département « IT OPERATIONS & RESILIENCE ». Vous encadrez une équipe de 6 personnes.Vous êtes en charge de définir et piloter les grandes orientations d’architecture d’infrastructure, de garantir un haut niveau de résilience IT et de mettre en œuvre les principes de sécurité associés, en lien étroit avec les équipes techniques, les métiers et la sécurité du Groupe, dans un contexte IT complexe, externalisé et multi fournisseurs. Vous travaillez au quotidien en interaction avec les équipes infrastructures, production, projets, postes de travail, les fonctions Sécurité (RSSI, RPCA), ainsi qu’avec nos fournisseurs IT stratégiques.Votre périmètre couvre l’ensemble des infrastructures techniques du Système d’Information : infrastructures systèmes (serveurs physiques et virtualisés, systèmes d’exploitation), stockage et sauvegarde, réseau, infrastructures liées aux postes de travail et à leur connectivité, data centers (environnements d’hébergement et sécurité physique), Mainframe et sous-systèmes associés.VOS MISSIONS :En tant que Responsable Architecture d’Infrastructure, Résilience & Sécurité IT, vos missions sont les suivantes :1/ Architecture d’infrastructure :- Définir et piloter la feuille de route d’architecture d’infrastructure pour l’ensemble du Système d’Information (serveurs, stockage, sauvegarde, réseau, postes de travail, data centers, mainframe…).- Garantir la cohérence globale des choix techniques et la bonne application des standards d’architecture.- Définir, maintenir et faire respecter les principes et standards d’architecture au sein de la DSI et auprès des fournisseurs.- Accompagner les projets (conseil, cadrage, validation des solutions techniques) afin d’assurer robustesse, performance et maîtrise des coûts.2/ DISASTER RECOVERY / Résilience IT :- Définir et piloter la stratégie de reprise d’activité IT couvrant les dispositifs techniques de continuité et de restauration du système d’information, en cohérence avec les exigences métiers,- Structurer la mise en œuvre des scénarios majeurs (physique, logique, postes de travail),- Piloter les dispositifs (sauvegarde, réplication, bascule, reconstruction),- Contribuer à la définition et à la réalisation des tests de reprise,- Garantir la réalité opérationnelle et piloter les améliorations.Compléments3/ Sécurité & Cryptographie : - Décliner la politique de sécurité sur votre périmètre et intégrer les exigences de sécurité dans les architectures d’infrastructure. - Contrôler la conformité des solutions mises en œuvre et contribuer aux audits. - Assurer l’interface avec le RSSI et les équipes sécurité, notamment dans la gestion des incidents majeurs. - Assumer la responsabilité opérationnelle de la cryptographie (gestion des clés), en lien étroit avec les fonctions de sécurité de l’organisation.Votre rôle est transverse, avec une forte responsabilité d’orientation, de cohérence et de contrôle.LES 5 BONNES RAISONS DE NOUS REJOINDRE :- Des équipes d'experts engagés pour fournir des solutions solides et innovantes permettant le développement du business et la compétitivité de CACEIS - Une attention à la qualité de service et à l'apport de valeur au business font partie de l'ADN de notre management de projet - Une IT Business Partner, support de la croissance internationale de CACEIS, à travers une organisation présente dans chaque pays et de solutions globalisées "One IT" - Un environnement motivant et inspirant où l'expertise est valorisée - Un accompagnement constant du niveau de compétences des équipes#LI-CR1Localisation du posteZone géographiqueEurope, France, Ile-de-France, 75 - ParisVillePARISTélétravailhybrideCritères candidatNiveau d'études minimumBac + 5 / M2 et plusFormation / SpécialisationEcole d’ingénieur ou université. Vous êtes diplômé d’un Master avec une spécialisation en systèmes d’information, infrastructures, sécurité ou domaine équivalentNiveau d'expérience minimum11 ans et plusExpérienceVous justifiez d’une expérience significative dans les infrastructures IT (on-premise, cloud, data center…), la mise en place ou le pilotage de dispositifs de Disaster Recovery / résilience, ainsi que dans la sécurité des infrastructures.Une expérience en environnement bancaire ou financier et dans un contexte multi-fournisseurs est un atout.Compétences recherchées- Expertise confirmée en architectures d’infrastructure (systèmes, stockage, sauvegarde, réseau, postes de travail, data centers, mainframe). - Maîtrise des enjeux de résilience IT (DRP, PRA, continuité d’activité) et des dispositifs techniques associés. - Connaissance des standards et bonnes pratiques de sécurité IT et capacité à les intégrer dans les architectures. - Capacité à travailler dans un contexte multi-fournisseurs, à challenger et piloter des partenaires externes. - Expérience du management : leadership, sens de la décision, capacité à orienter et à fédérer des équipes pluridisciplinaires.Outils informatiquesVous disposez d’une bonne maîtrise des environnements d’infrastructure (virtualisation, stockage, sauvegarde, réseau…) et des outils de pilotage associés.La maîtrise des outils bureautiques (Pack Office) est également attendue.LanguesAnglais courant indispensable : contexte international (test au cours du process de recrutement)

ABOUT CFMFounded in 1991, we are a global quantitative and systematic asset management firm applying a scientific approach to finance to develop alternative investment strategies that create value for our clients.We value innovation, dedication, collaboration, and the ability to make an impact. Together, we create a stimulating environment for talented and passionate experts in research, technology, and business to explore new ideas and challenge existing assumptions.Your RoleJoin our Security team as a Senior Security Operations Engineer and help strengthen our security posture across a hybrid environment (on‑prem and AWS).Directly reporting to our Security Operations Lead, you will participate in CSIRT/CERT operations, lead advanced incident investigations, conduct threat hunting and forensic analysis, and continuously improve our detection and response capabilities.You will also operate and evolve our security tooling (e.g., SIEM, SOAR, EDR, WAF, vulnerability management) and partner with technical teams to embed security by design through reviews and threat modeling.You will partner closely with our IT teams to drive remediation and reliability.Key ResponsibilitiesSecurity operations platform ownership- Operate, maintain, and continuously improve security platforms (SIEM/SOAR, endpoint security, vulnerability management, web protection, email/security controls, secrets management, etc.).- Ensure platform availability, performance, and resilience through upgrades/patching, configuration reviews, access controls, health checks, and periodic validation/testing.- Improve telemetry quality: logging coverage, data onboarding/normalization, retention requirements, and integration of reliability.Incident Response & forensics - Lead end-to-end incident responses for complex security events. - Perform forensic investigations across endpoints, servers, and cloud workloads (AWS): acquire and preserve evidence, analyze artifacts, and reconstruct attack timelines. - Produce high-quality incident deliverables: executive summary, technical report, impact analysis, root cause, IOCs, and lessons learned with prioritized actions. - Coordinate with IT/Engineering to execute remediation actions (account resets, host isolation, key rotation, patching) and validate post-incident security.- Support incident communications and stakeholder management, including escalation, regulatory/compliance inputs when needed, and post-incident reviews.Security-by-design & technical assurance- Serve as the security technical point of contact for projects and changes (on‑prem and AWS): define/validate security requirements and provide pragmatic architecture guidance.- Conduct technical security reviews and threat modeling for applications, infrastructure, and cloud changes.- Perform risk assessments for requests (e.g., new applications, integrations, browser extensions) and recommend controls.External security activities- Coordinate external security partners (penetration tests, vulnerability assessments, purple-team exercises): scope, rules of engagement, access Your SkillsMust-Have- Bachelor's degree in computer science, Information Security (or related) or equivalent professional experience.- 5+ years in security operations / security engineering / incident response roles.- Hands-on experience operating and improving a modern security stack (e.g., SIEM, SOAR, EDR, WAF, vulnerability management).- Strong AWS security foundations (IAM, networking/VPC concepts, native controls, logging/monitoring strategy).- Solid application security knowledge (AuthN/AuthZ, OWASP Top 10, API security, CSP concepts).- Proven incident response experience: investigation, containment, eradication, RCA (forensic experience valued).- Strong networking fundamentals (TCP/IP, HTTP/S, DNS, SMTP, SSH, TLS, firewalling) and ability to analyze logs/traffic.- Ability to develop and maintain automation/scripts (Python required).- Fluency in French and English.Nice-to-Have- Security certifications (e.g., CISSP, GCIA/GCIH, SIEM-related) or equivalent experience.- Experience in regulated industries (healthcare/fintech/govtech).- Comfortable working cross-functionally with Security, IT, Engineering, and Compliance.- Familiarity with engineering workflows (Git-based collaboration, CI/CD concepts).Note- Remote work is permitted for up to two days per week.- This position involves taking part in on-call responsibilities.EQUAL OPPORTUNITIES STATEMENT We are continuously striving to be an equal opportunity employer and we prohibit any discrimination based on sex, disability, origin, sexual orientation, gender identity, age, race, or religion. We believe that our diversity, breadth of experience, and multiple points of view are among the leading factors in our success.CFM is a signatory of the Women Empowerment Principles.FOLLOW US Follow us on Twitter or LinkedIn or visit our website to find out more about CFM.

About MistralMistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.Role summaryAs a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business.What you will doContribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program.Support the definition, implementation, and maintenance of the Information Security Management System.Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits.Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements.Help teams understand their responsibilities and expected contributions to compliance initiatives.Develop and deliver cybersecurity compliance training and awareness materials.Participate in cybersecurity risk assessments and support the monitoring of remediation actions.Maintain compliance documentation, policies, procedures, control records, and audit materials.Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization.Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development.Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost.About you5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field.Experience supporting cybersecurity compliance programs, certification processes, or external audits.Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage.Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.Excellent written and verbal communication skills.Strong analytical and problem-solving abilities.Ability to work collaboratively across technical, legal, commercial, and operational teams.Professional proficiency in English; French proficiency is a plus.What We OfferWe offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.For the most up-to-date details on benefits available in your location, please refer to our Benefits page.Privacy PolicyYour privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.LocationParis; New YorkEmployment TypeFull timeLocation TypeOn-siteDepartmentEngineering & Infra

What You'll Do:The IDAM (Identity and Access Management) team is part of Criteo’s Security group and builds the authentication and access management foundations for internal R&D platforms and services.We work on browser-based and server-to-server authentication flows, identity lifecycle management, token exchange, and secure access for both user and service accounts — including internal MCP servers.Our ecosystem includes technologies such as Active Directory, Kerberos, OIDC, and internally developed authentication and access management solutions. The team focuses on building scalable, reliable, and secure identity services that are critical for engineering productivity and platform security across the company.Key Responsibilities:Own feature delivery end-to-end, including requirements clarification, design, implementation, deployment, and operational support;Design, develop, review, test, and maintain scalable and reliable software services;Build and operate production systems with strong focus on availability, performance, observability, and security;Develop and maintain CI/CD pipelines, deployment automation, and Infrastructure as Code solutions;Improve system reliability through monitoring, automation, troubleshooting, incident management, and root cause analysis;Collaborate closely with engineering, infrastructure, and product teams to deliver resilient and maintainable solutions;Contribute to architecture decisions, operational excellence, and continuous improvement of development and infrastructure practices;Support and mentor team members by sharing knowledge and engineering best practices.Who You Are:5+ years of experience in software engineering, infrastructure, SRE, or related engineering roles;Strong software development skills using languages such as Python, Java, C#, Go, or similar;Experience building backend services, REST APIs, and distributed systems;Solid understanding of Linux systems, networking fundamentals (TCP/IP, HTTP, DNS), and production environments;Hands-on experience with Docker, Kubernetes, CI/CD pipelines, and Infrastructure as Code tools such as Terraform;Experience with monitoring and observability tools such as Prometheus, Grafana, ELK stack, Sentry, or similar;Good understanding of system reliability, scalability, automation, and operational best practices;Strong troubleshooting, debugging, and problem-solving skills with ownership mindset;Collaborative, proactive, and comfortable working independently in cross-functional environments;Fluent spoken and written English.We acknowledge that many candidates may not meet every single role requirement listed above. If your experience looks a little different from our requirements but you believe that you can still bring value to the role, we’d love to see your application!Who We Are:We’re Criteo, the Commerce Intelligence Platform. Criteo helps businesses turn shopper signals into commerce outcomes while delivering more relevant experiences for shoppers. We use proprietary commerce intelligence and AI decisioning to drive relevance for shoppers and performance for businesses.At Criteo, our culture is as unique as it is diverse. From our offices across the globe or from the comfort of home, our 3,600 Criteos collaborate together to build an open, impactful, and forward-thinking environment.We foster a workplace where everyone is valued, and employment decisions are based solely on skills, qualifications, and business needs—never on non-job-related factors or legally protected characteristics.What We Offer:🏢 Ways of working – Our hybrid model blends home with in-office experiences, making space for both. 📈 Grow with us – Learning, mentorship & career development programs. 💪 Your wellbeing matters – Health benefits, wellness perks & mental health support. 🤝 A team that cares – Diverse, inclusive, and globally connected. 💸 Fair pay & perks – Attractive salary, with performance-based rewards and family-friendly policies, plus the potential for equity depending on role and level. Additional benefits may vary depending on the country where you work and the nature of your employment with Criteo. SummaryLocation: ParisType: Full time

Set a new pulse for healthcare!We are looking for a Senior Corporate Security Engineer to join the Corporate Security team in SecOps.Your mission will be to secure everything Doctolibers rely on to do their best work identities, endpoints, SaaS applications, and the zero-trust network that connects them in a highly regulated healthcare environment (HDS, ISO 27001, C5) where security directly impacts patient safety and trust. You will own security programs end-to-end, shipping every control as code and driving adoption across teams, contributing directly to the protection of data for over 80 million patients and 400,000 health professionals.Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.What you'll doYour responsibilities include but are not limited to:Own corporate security programs from architecture to enforcement: conditional access, phishing-resistant authentication, device compliance, SaaS and third-party app governance (including AI tools), and zero-trust network access.Ship every change as code: use Terraform and GitHub pull requests to bring controls to production designed, peer-reviewed, rolled out progressively (report-only enforce), and always reversible.Drive adoption across teams: write technical proposals, align IT and business stakeholders, plan communications and exception handling, and land security controls without disrupting how people work.Evaluate and secure the tools Doctolibers adopt: conduct security reviews of SaaS integrations and AI tools, and deliver pragmatic, risk-based responses to shadow IT.Investigate and improve: lead incident investigations on the corporate perimeter end-to-end, and continuously improve detection rules and response playbooks in our Elastic SIEM.Mentor more junior engineers and contribute to a team culture of engineering excellence and peer review.Who you areBefore you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.You'll be a great fit if you:Have 5+ years of hands-on experience securing corporate/enterprise environments — identity, endpoints, SaaS, and network — including at least 2 years at a senior level. You have built and enforced security controls in production (not only monitored alerts), and owned at least one significant program end-to-end, such as an MFA rollout, a device-compliance initiative, or a SaaS access-governance project.Have strong daily mastery of GitHub, Terraform, and AI coding assistants (Claude or equivalent). You ship security work as reviewed pull requests and use AI agents as a structural part of your workflow, not an occasional helper.Have deep identity & access expertise: identity providers, conditional access policies, OAuth/application governance, and modern authentication standards (passkeys, phishing-resistant MFA).Have a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills — you can carry a proposal from draft to cross-team adoption.Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.It would be fantastic if you:Have detection engineering or SIEM experience (writing and tuning your own queries).Are curious about platform security topics (cloud, Kubernetes, supply chain) and willing to contribute beyond your core perimeter.Have prior experience in a regulated industry (healthcare, fintech, or public sector).Life at Doctolib TechOur solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here.Want to learn more about our tech culture and environment? Visit the Doctolib Tech site.What we offerFree comprehensive health insurance (basic package) for you and your children25 days of paid vacation per year, plus up to 14 days of RTTFree mental health and coaching services through our partner Moka.careWork from abroad for up to 10 days per year thanks to our flexibility days policyLunch vouchers (Swile card) worth 8.50 per working day, with 4.50 covered by DoctolibA subsidy from the work council to refund part of the membership to a sport club or a creative class50% reimbursement of your public transport subscriptionParent Care Program: receive one additional month of leave on top of the legal parental leaveEnrollment in Doctolib's long-term employee value sharing plan called DoctoGrowthFor caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological supportRelocation support in case of international mobilityAccess to the best AI tools for coding, development and dedicated trainingOur interview processTA ScreeningTechnical Assessment (~90 min, live): security questions followed by a hands-on scenario worked through together — with an AI assistant available directly in the platform, the way we actually workBehavioral InterviewAt least one reference checkWe want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our candidate experience page.Job detailsPermanent positionTech stack: Terraform, GitHub, Entra ID, Intune, CrowdStrike, Cloudflare, Elastic, Google WorkspaceFull-timeParis, FranceHybrid work setup (up to 2 remote days per week)Start date: as soon as possibleWe welcome everyoneAt Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination.The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability.To ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process.Join us in building the healthcare we all dream of!Your data privacyAll information provided is processed by Doctolib for application management. For data processing details, click here: France. Please contact hr.dataprivacy(at)doctolib.com for inquiries or to exercise your rights.

As organizations rapidly adopt AI applications and agentic systems, security teams need visibility and control over how these technologies are being used. Datadog's AI & Data Security product helps customers discover, secure, and govern AI usage across their environments ensuring sensitive data is properly managed from model training through production.As a Product Manager II for AI & Data Security, you will own capabilities for AI discovery, posture management, and data security; giving customers complete visibility into their AI applications, agents, and enabling ecosystem, with prioritized actions to operate AI systems securely.You'll partner with engineering, design, security research, and GTM teams to define and ship platform capabilities that help organizations adopt AI at scale.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You’ll Do:Own the roadmap for AI & Data Security capabilities, including AI and data discovery & posture management.Define how security teams can assess and manage the security posture of AI-enabled systems, including configuration risks, sensitive data exposure, and policy violations.Work closely with engineers and designers to deliver new product capabilities end-to-end, from early concept through launch and iteration.Partner with Datadog security researchers to identify emerging risks in AI systems and translate them into actionable product features.Engage with customers to understand how they are adopting AI and validate solutions that help them operate these systems securely.Collaborate with go-to-market teams to enable adoption and communicate the value of AI security capabilities to customers.Who You Are:You have 3+ years of product management experience building technical products, ideally in security, AI, data, cloud infrastructure, or developer platforms.You have a strong understanding of generative AI, modern cloud environments and application architectures.You are interested in the security challenges introduced by AI and machine learning systems.You enjoy working closely with engineers and are comfortable discussing technical implementation details and tradeoffs.You regularly engage with customers and use their feedback to drive product decisions and prioritization.Experienced engaging customers and translating feedback into product decisions.Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.Benefits and Growth:Generous and competitive benefits packageNew hire stock equity (RSUs) and employee stock purchase planContinuous career development and pathing opportunitiesEmployee-focused best in class onboardingInternal mentor and cross-departmental buddy programFriendly and inclusive workplace cultureBenefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.About Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

This role focuses on defining and supporting security risk management processes, monitoring key risks, and advising the business on risk-driven decisions. It involves developing a comprehensive security risk framework, providing training, and promoting a risk-aware culture across the Group. Daily collaboration across entities is essential to improve security risk practices and frameworks. About AXAAs a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.About the entityAXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation. We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.At AXA Group Operations, we want to be recognized in three fields of action:State-of-the-art Data Technology to drive customer experienceState-of-the-art Procurement & Sourcing to drive efficiency and better manage risksHigh-Performing Global Team for stronger partnerships with AXA entitiesAbout the TeamThe Security Risk team ensures that AXA is identifying, monitoring, and prioritizing its key security risks, across our three security disciplines.Security risk which encompasses Information Security, Operational Resilience and Physical Security risks plays a key role in AXA’s security ambition of securing the customer journey and delivering resilient services to our customers. You will be part of a highly dynamic global team, working closely with Group executives, security management teams and the Chief Security Officers who’s operating companies from around the world. Our team is responsible for the security risk framework and vendor security risk framework.About the jobMain MissionsOur main missions are to:Define the requirements and capabilities to perform security risk management and vendor security riskSupport the risk reduction and prioritization of security activitiesMonitor key security risks for the Group and communicate to interested partiesDevelop and sustain Security Risk Management maturity and risk awarenessBe a privileged advisor to support Business in taking risk driven decisionsOur goals are to:Design, maintain and improve a converged Security Risk framework and associated methodologies / tooling. This includes entity based risk assessments, asset based risk assessments and vendor security risk assessmentsProvide training and support to our Entities in the implementation and improvement of their local Security Risk Management FrameworkDetermine the security risk posture of the Group to support strategic initiatives on risk reduction and prioritizationMaintain and continuously improve Vendor Security, Information Security risk management and Data classification instructions and related frameworksIdentify and Assess key transversal risks for the GroupProvide subject matter expertise and advisory on security risk related topics Animate our Security Risk Community across our Entities to promote a risk-aware cultureYou will be working daily transversally with reinforced interaction and co-construction.Your stakeholders Internally: you will interact with AXA Group Risk & Internal Audit, IT Leadership & Business Leadership, Group Compliance & Legal, IT Operations & Business Operations, Local/Regional CSO and Security team members Externally: Expected to interact with external third partiesYour Certifications Security and/or Information Technology industry certification (ISO 27001 (Implementer/Auditor), ISO 22301 (Implementer/Auditor), CISSP, CRISC, CISA, CISM or equivalent) preferredExpected skills & experienceWe are looking for someone with the following experience and skills: ExperienceExperience in articulating security risks in business language and advising on the appropriate risk management strategy > 3 yearsExperience in Information Security field > 3 yearsExperience in Operational Resilience > 2 yearsExperience in Physical Security / Health & Safety > 2 yearsSkillsAbility to function effectively in a matrix structureResilient capacityProficient risk assessment, interpretation, and analytical skillsStrong networking skillsTeam playerFluent in EnglishWhat we offerWe bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.

As a Senior Product Manager for AI & Data Security at Datadog, you will define and deliver capabilities that help organizations securely adopt and scale AI across their applications and infrastructure. You’ll focus on building products that provide visibility into AI systems and data usage, assess security posture, and enable teams to manage risk across the AI lifecycle. This role sits at the intersection of security, AI, and cloud platforms, and is ideal for a PM who thrives in emerging, ambiguous problem spaces. You will work cross-functionally to shape how customers discover, understand, and secure AI-powered systems in production.At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.What You’ll Do:Own and drive the roadmap for AI & Data Security capabilities, including data security posture management and data loss preventionDefine how customers assess and manage the security posture of AI systems, including risks related to configuration, data exposure, and policy compliancePartner with engineering and design to deliver end-to-end product capabilities, from concept through launch and iterationCollaborate with security research teams to identify emerging risks in AI systems and translate them into actionable product featuresEngage with customers to understand AI adoption patterns and validate solutions that enable secure, scalable operationsDefine and track success metrics such as product adoption, usage, and impact on customer security workflowsWho You Are:5+ years of product management experience building technical products in areas such as security, AI, data, cloud infrastructure, or developer platformsStrong understanding of modern cloud environments, application architectures, and the fundamentals of generative AI systemsInterest in the security challenges introduced by AI and machine learning systems, particularly in production environmentsComfortable working closely with engineers and discussing technical design, tradeoffs, and implementation detailsExperience engaging with customers and using their feedback to inform product decisions and prioritizationAbility to navigate ambiguity and translate complex problem spaces into clear product direction and executionDatadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.Benefits and Growth:Generous and competitive benefits packageNew hire stock equity (RSUs) and employee stock purchase planContinuous career development and pathing opportunitiesEmployee-focused best in class onboardingInternal mentor and cross-departmental buddy programFriendly and inclusive workplace cultureBenefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.#LI-HybridAbout Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. Equal Opportunity at Datadog:Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines:Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

About MistralMistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.Role summaryAt Mistral AI, we’re pushing the boundaries of what’s possible with agentic systems—building products like Mistral Studio and Mistral Vibe that redefine how users interact with AI. As an Offensive Security Pentester, you’ll play a pivotal role in safeguarding these innovations by anticipating, identifying, and mitigating risks before they materialize. This isn’t just about finding vulnerabilities; it’s about shaping the future of secure AI by embedding an attacker’s mindset into everything we build.You’ll work at the intersection of offensive security, AI safety, and product development, collaborating with cross-functional teams to harden our systems against evolving threats. Your expertise will directly influence how we design, deploy, and protect our most critical assets, ensuring our agents remain resilient, trustworthy, and ahead of adversaries.This role is ideal for those who thrive in dynamic environments, where creativity, technical depth, and a passion for security converge to solve unprecedented challenges.What you will doProactively hunt for vulnerabilities in the interactions between our agentic applications, cloud infrastructure, and foundational models, with a focus on realistic, high-impact attack vectors.Design and execute red and purple team exercises, simulating sophisticated adversarial scenarios to stress-test our defenses and refine our detection capabilities.Partner with defensive teams to translate offensive insights into actionable improvements, from detection engineering to incident response.Conduct in-depth penetration testing across our product suite, including AI-driven workflows, custom infrastructure, and user-facing interfaces.Build and automate offensive tooling to scale your impact, leveraging cutting-edge techniques to stay ahead of emerging threats.Communicate findings with clarity and conviction, ensuring technical and non-technical stakeholders understand risks and prioritize mitigations effectively.Shape Mistral AI’s security strategy by contributing attacker-informed perspectives to threat modeling, risk assessment, and architectural decisions.About youYou’re likely a strong fit if you bring:7+ years of offensive security experience, with a track record of identifying and exploiting subtle vulnerabilities in complex systems—or equivalent expertise demonstrated through exceptional achievements.Deep knowledge of AI/ML security risks, including prompt injection, data leakage, model manipulation, and abuses of dynamic UI components.Hands-on experience assessing modern technology stacks, such as:Custom Kubernetes deployments and containerized environmentsCloud-native architectures (AWS, GCP, or Azure)CI/CD pipelines and GitHub security best practicesmacOS/Linux internals and Python/React-based applicationsData science toolchains and AI/ML infrastructureA builder’s mindset: The ability to write robust tools, automate offensive workflows, and contribute to defensive solutions in complex codebases.Strong intuition for trust boundaries and risk assessment in fast-moving, high-stakes environments.Outstanding communication skills, with the ability to distill technical nuances into compelling narratives that drive change.A collaborative spirit, eager to work alongside engineers, researchers, and product teams to embed security into every phase of development.Now, it would be ideal if you had experience with:Background in AI, data science, or related fields, with an understanding of how security intersects with model behavior and system design.Experience in high-growth startups or research-driven organizations, where agility and innovation are paramount.Expertise in adjacent disciplines, such as software engineering, detection engineering, SRE, or security architecture.What We OfferWe offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.For the most up-to-date details on benefits available in your location, please refer to our Benefits page.Privacy PolicyYour privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.LocationParisEmployment TypeFull timeDepartmentEngineering & Infra

We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures. If you want to make a true impact, we want you to join us at Ledger.At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 millions units already sold in 200 countries. The team:You’ll join the Security Operations team, responsible for protecting Ledger’s corporate, cloud, SaaS, and data center environments. Its mission: to anticipate, detect, investigate, and respond to cyber threats—including monitoring, alert triage, incident response, detection, visibility, automation, exposure tracking, and continuous process improvement. The scope is distinct from that of the Donjon (product security): SecOps covers the operational security of internal environments, the cloud, endpoints, workloads, identities, and infrastructure.As a close-knit and experienced team—technically demanding and committed to knowledge sharing—we’re also continuously building the SOC itself: integrating new log sources, ensuring data quality, expanding detection coverage, and developing reliable dashboards and operational workflows.Our technical stack includes:Splunk for SIEM, investigations, and dashboards;CrowdStrike for EDR and endpoint/workload security;Wiz for cloud security and exposure management;Torq for SOAR and automation;AWS, including modern environments such as EKS/Kubernetes;An in-house developed Agentic SOC for alert enrichment, correlation, investigation support, reporting, and automation.AI is at the heart of how we work: investing in AI applied to security is a strategic priority for Ledger this year. We’ve built our own in-house Agentic SOC, which autonomously investigates weak signals—the large volume of unreliable alerts that a human team couldn’t sort through manually—and enriches them, so our engineers can focus on what matters most and resolve incidents faster: high-quality detection, noise reduction, and accelerated investigations.What you’ll be doing:As a Staff Security Operations Engineer, you are the SecOps team’s top technical expert and our go-to authority on incident management. You lead the response to the most critical and complex incidents (CSIRT), spearhead proactive threat hunting, and define the detection and response strategy that the entire team relies on. Beyond day-to-day operations, you shape the architecture of our detection pipeline, SIEM, and automation—including the management of our internal Agentic SOC—and you establish the standards, playbooks, and methodologies that raise the technical bar for the entire team. Above all, you’re a builder: beyond design, you’ll build and actively evolve our systems—the Agentic SOC, the log pipeline, and automation—with a solid understanding of the underlying infrastructure. This is an expert role (individual contributor): your impact stems from your expertise, your judgment under pressure, and your influence.Critical Incident Response (CSIRT)Serve as the primary point of contact and coordinator for the most complex incidents across the cloud, corporate systems, endpoints, identities, and the data center.Conduct end-to-end investigations: root cause analysis, forensics, timeline reconstruction, and remediation recommendations to prevent recurrence.Serve as the team’s go-to expert in incident management, ensuring a rigorous and consistent approach to handling, escalating, and documenting incidents.Detection Strategy & Threat HuntingDefine the team’s detection strategy, architecture, and methodology.Lead proactive threat hunting by leveraging CTI and OSINT to identify and neutralize risks before they impact Ledger.Address the most challenging and emerging detection issues, and translate threat intelligence into concrete improvements in security posture.Architecture & Agentic SOCDesign and optimize the SIEM (Splunk) architecture and SOAR (Torq) workflows that underpin effective detection, triage, and response.Bring our Splunk environment up to standard and state-of-the-art: data quality and standardization (CIM), data models, search performance, and detection governance.Build, evolve, and own the architecture of our internal Agentic SOC and our log/data pipeline, and lead the automation of reporting for the SecOps team.Apply deep expertise in cloud security (AWS, EKS/Kubernetes) and Wiz (CSPM/CNAPP) to harden the cloud and prioritize large-scale exposure.Technical Leadership & MentoringEstablish the standards, playbooks, and runbooks that the team relies on.Mentor and foster the technical growth of senior and junior engineers, and act as a force multiplier within SecOps.Work with the Engineering, Infrastructure, IT, and Cloud teams to align operational security with the organization’s objectives.What we’re looking for:9+ years of experience in security operations, incident response, and CSIRT.A strong track record as a technical expert in incident management, threat hunting, and detection engineering.Comfortable working both as an individual contributor and as a team player in a fast-paced cloud and SaaS environment.In-depth expertise in SIEM (ideally Splunk) and SOAR platforms, as well as CTI/OSINT methodologies.Solid knowledge of AWS security (IAM, audit logs, network configurations, workloads, containers, Kubernetes) and cloud security tools (ideally Wiz, CSPM/CNAPP); experience with an EDR (ideally CrowdStrike).Strong incident response and forensics skills, with the ability to conduct complex end-to-end investigations.The ability to automate tasks and reporting using Python, Bash, APIs, GitHub Actions, a SOAR platform, or equivalent.A solid understanding of infrastructure (cloud, networking, containers, CI/CD) and the ability to build and scale: log/data pipelines, integrations, and internal services.A strong interest—or experience—in AI applied to security operations, agent-based workflows, and SOC automation.Rigor and discipline: You follow and improve established processes and ensure consistency in incident handling and reporting; excellent analytical skills, even under pressure.Clear communication of complex technical concepts to cross-functional teams; ability to document thoroughly and escalate issues with the appropriate level of context; awareness of confidentiality and the proper handling of sensitive information.LocationParis, FranceAddressParisEmployment TypeFull timeLocation TypeHybridDepartmentTechSecurity

QUI SOMMES-NOUS ?S3NS est né du partenariat industriel entre Thales, leader mondial de la cyber sécurité, et Google Cloud, leader mondial des solutions cloud. Nous avons pour ambition d’offrir le meilleur des deux mondes à l’ensemble des organisations soucieuses de protéger leurs données sensibles (institutions publiques, OIV, OSE…). C’est-à-dire une solution équivalente à Google Cloud Platform (incluant à la fois les services IaaS et PaaS de GCP) et respectant les exigences du label SecNumCloud.Une première offre, ‘Contrôles locaux avec S3NS’, est déjà disponible depuis février 2023 pour permettre à nos clients de bénéficier d’un premier niveau de transparence et contrôles additionnels, et d'accélérer la trajectoire vers le cloud de confiance.Vous aurez pour missions :Mener la conception des principaux composants logiciels, systèmes et fonctionnalités en collaboration étroite avec les architectes de S3NS afin d'améliorer la disponibilité, l'évolutivité, la latence et l'efficacité des services du Cloud de Confiance de S3NSMettre en œuvre des politiques de moindre privilège via des outils ou des politiques personnalisées.Gérer le cycle de vie des identités (utilisateurs et comptes de service) et l'intégration avec des fournisseurs d'identité tiers (IdP).Mener le design, le développement et l’intégration des solutions d’automatisation et de suivi des infrastructures afin de nous permettre une mise à l’échelle de nos opérations sensibles et processus critiquesIndustrialiser le déploiement des politiques de sécurité via l'Infrastructure as Code (Terraform).Piloter la construction des services d’identité et de sécurité permettant d’implémenter nos Trust Services ET opérer les services de S3NS dans un environnement Cloud de ConfianceRevues Post-incident : Après un incident, réunir les équipes pour effectuer un post-mortem, comprendre les causes, tirer des leçons et encourager l'amélioration continueConformément aux exigences de qualification SecNumCloud de nos services, délivrée par l'ANSSI, ce poste est soumis à des exigences de sécurité renforcées. Le candidat retenu devra se soumettre à une enquête de sécurité menée par nos services, conformément à notre politique de sécurité du personnel.Votre profil :Vous disposez d'un bac+5 et disposez d'au minimum 5 ans d'expériences sur des missions similaires :Expertise Identity & Access Management (IAM)Solutions d'Identité : Maîtrise ou forte appétence pour Keycloak et OpenLDAP.Protocoles : Implémentation stricte des standards OIDC, OAuth2, SAML et LDAP.Secret Management : Gestion centralisée via HashiCorp Vault.Zero Trust : Déploiement et gestion de HashiCorp Boundary pour la sécurisation des accès critiques.Identity-as-Code : Automatisation complète du cycle de vie des identités, des rôles et des politiques de sécurité (RBAC / ABAC).SummaryLocation: PARIS 9èmeType: Full time

About usOwkin is an agentic AI company pioneering Biological Artificial Superintelligence to solve problems in biology where human researchers alone have failed.Owkin builds K Pro - an AI scientist for pharmaceutical research and strategic decision-making. K Pro orchestrates a suite of AI skills and tools to decode complex biology, accelerate research, and dramatically increase productivity.K Pro is built on Owkin’s unrivalled multimodal patient data network, state-of-the-art AI for biology and a decade of experience working with pharmaceutical partners.Position is based in remotely in UK or Germany, hybrid (Paris) or remote in France.Please submit your CV in EnglishAbout the role:We are seeking a highly skilled Security Engineer with strong software engineering foundations and expertise in application security, DevSecOps, and cloud-native security. This role is ideal for someone who understands modern engineering workflows and can partner closely with software engineering, platform, and DevOps teams to embed security into the software development lifecycle. You will play a key role in securing applications, improving developer security practices, supporting Kubernetes and AWS environments, and helping Owkin scale secure engineering practices across its AI-driven platform.In particular, you will:Conduct in-depth application security assessments and secure code reviews across frontend and backend systemsPartner with engineering teams to remediate vulnerabilities and improve secure coding standardsReview and secure Git-based development workflows and branching strategiesIntegrate security controls into CI/CD pipelines in GitHub and DevSecOps processesSupport cloud-native security initiatives across Kubernetes and AWS environmentsUse modern application security tooling, including Wiz Code, to identify and prioritise risksDevelop automation and tooling using Python to support security operations and engineering workflowsAdvise developers on secure architecture, threat modelling, and security best practicesCollaborate with DevOps, Platform Engineering, and Software Engineering teams to improve overall security postureAssist with vulnerability management, risk assessment, and remediation trackingContribute to security standards, policies, and developer enablement initiativesOn-call rotation for Wiz alerts (paid at an additional rate)About youRequired qualifications / experience:Strong frontend and backend software engineering experienceExpert-level knowledge of Git and modern version control workflowsHands-on application security experience in modern engineering environmentsExperience performing manual and automated secure code reviewsStrong understanding of CI/CD pipelines and DevSecOps principlesPractical experience with Kubernetes security and containerised environmentsStrong AWS cloud security knowledgeKnowledge of OWASP Top 10, secure coding practices, and vulnerability remediationAbility to communicate effectively with developers and engineering leadershipCollaborative and pragmatic approach to securityPreferred qualifications/bonus:Experience with Wiz Code or similar application security toolingFamiliarity with Infrastructure as Code tools such as Terraform or CloudFormationKnowledge of container security and Kubernetes hardeningExperience integrating security tooling into developer workflowsRelevant certifications such as AWS Security Specialty or Kubernetes Security certifications, would be a bonusFrench-speaking would be a bonus, but not essential #LI-HB1What we offerFlexible work organizationFriendly and informal working environmentOpportunity to work with an international team with high technical and scientific backgroundsRecruitment Process & SecurityPlease complete the form and submit your CV.Owkin is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, sex, gender, sexual orientation, age, color, religion, national origin, protected veteran status or on the basis of disability.Owkin is a great place to work. As a coveted workplace we are, unfortunately, vulnerable to recruitment phishing scams. We urge all job seekers and candidates to be wary of potential scams. Most of these have individuals posing as representatives of prominent companies, including Owkin, with the aim of obtaining personal, sensitive, or financial information from applicants. These scams prey upon an individual’s desire to obtain a job and can sometimes “feel” like a genuine recruitment process. Some red flags are identified below. Should you encounter a recruitment process that claims to be for Owkin but is not consistent with the below, please do not provide any personal or financial information:Legitimate Owkin recruitment processes include communication with candidates through recognized professional networks, such as LinkedIn.Communication is always through an official Owkin email address (from the @owkin.com domain), over the phone or through our applicant tracking system (Greenhouse).The Owkin talent team do use platforms such as LinkedIn and Job Teaser, however if you have any concern or doubt about this contact, please ask for them to send an email from @Owkin.com.The Owkin talent team will not solicit personal data from candidates during the application phase including, but not limited to, date of birth, social security numbers, or bank account information;Legitimate Owkin interviews may be conducted over the phone, in person, or via an approved enterprise videoconferencing service (Google Meets). They will not occur via Signal, Telegram or MessengerOwkin offers of employment are based on merit and only extended once a candidate has interviewed with members of the talent and hiring team. Offers will be extended both verbally and in written format.If you think that you have been a victim of fraud,Check the identity of the talent team on LinkedInCheck our senior team on our website Check the existence of the position on our website: Notify Owkin's recruitment unit at this address hiring@owkin.comcontact the following authorities:[FR] [UK] [US] LocationParis ; Germany; UKAddress14/16 Bd Poissonnière, Paris, , 75009Employment TypeFull timeLocation TypeRemoteDepartmentSECURITY

Job purpose: Execute the global security policy by delivering the actual security technology and by managing & supporting our network security infrastructure in collaboration with regional network teams.Oversee the team of employees and partners that runs the network security segment of the Pernod Ricard global network.Contribute to the global network design, security architecture and roadmap/strategyBalance security requirements with the optimization of the performance of the networkMain roles and responsibilities:Daily Operations:Support/Troubleshoot - the security network architecture in collaboration with the regional Network teams across the global landscape. Be the main point of contact for security incidents and provide network response.Design - Recommend and integrate the security design of the global network landscape including LAN, WAN, Wifi, Firewalls, Web Proxy and VPN technologies.Implement - infrastructure security solutions that support network related business services internal and external to PR.Policy - Ensure network technology solutions adhere to PR Cybersecurity and Governance policies.Performance - Achieve network availability and performance objectives, including the optimization and monitoring of the performance of the designated regional networkTeam Relationships:Strong collaboration between regional Network teams and Network ArchitectStrong collaboration between Network and Security teamsStrong collaboration between Network and Service Delivery/Help Desk TeamsChange Control Process:Ensure change control process is adhered to and coordinated with other IT members and vendors that support IT.Problem Management: Ensure all network related problems are logged and tracked in accordance with problem resolution procedures.Project Management:Develop, coordinate, and support network projects.Support:Provide Network support during security incidents, including assistance with investigations and root cause analysisProvide third level support as it relates to security, including troubleshooting, documentation, incident mgmt procedures, etc.Ensure network issues/outages are resolved expeditiously.Provide trend identification and root cause analysis.Continuity Management:Manage the actions to be taken to ensure that IT services can recover and continue should a serious incident occur.Implement a set of reactive and proactive measures to reduce risks.Vendor Management:Manage relationship with vendors and external partners.Scope:Team management: 0-2 FTE + External partner resourcesKey internal stakeholders: All the IT TeamsKey external stakeholders: Vendors (external service providers)Availability to travel: Occasional travel within regional perimeter and worldwide for team meetingsProfile required:Education required: BAC+2/ +3Certified Ethical Hacker (CEH) Certification or similar certification preferredMinimum of 1 SANS Certification preferredCISSP preferredExperience / Background:3+ years of previous experience in IT1-2 years of experience in Network Security technologiesTeam Management experience and experience with collaboration with other teamsExperience troubleshooting network issuesExperience managing significant external service providers and associated relationshipsExperience developing and implementing technology roadmapsExperience interacting with various corporate profiles: technical personnel, end users, high profileKnow-how and tools : (linked to tools/job/method)Experience in wireless infrastructure technologiesExperience in high-end wide area networking technologies including MPLS, VPN and routing protocols.Experience in local area network (VLAN, Trunking) and advanced switching protocols and designStrong knowledge of security infrastructure design and technologies like web security, firewalls, IPS, encryption, authenticationStrong knowledge with core network services like DHCP, DNS, Radius, Client VPN, etcLanguage required: Fluent in EnglishPernod Ricard values diversity and solidarity within its organization and in its relations with its stakeholders. Our recruitment methods focus on skills and we welcome all types of talent. Job Posting End Date:Target Hire Date:2023-03-09Target End Date:SummaryLocation: ParisType: Full time

Le poste de Cloud Security Engineer - H/F - CDI.