Security engineer

Sekoia.io repense la cybersécurité pour la rendre encore plus pertinente, efficace et accessible. L'un des principaux défis que nous relevons est d'analyser et de comprendre en permanence les menaces émergentes afin de définir des stratégies appropriées et d'avoir la capacité de les exécuter à grande échelle. En combinant la technologie et une équipe pluridisciplinaire de passionnés de Threat Intelligence, Sekoia.io a un fort impact sur la cybersécurité avec une approche qui brise les silos, qu'ils soient technologiques, organisationnels ou culturels.

• Build and strengthen our security foundations
• Enhance and expand security controls across our Kubernetes infrastructure.
• Develop security automation tools and frameworks, and put them into practice.
• Strengthen the security of our CI/CD pipelines.
• Help drive our patch management strategy and handle patch implementation.
• Secure our applications and software supply chain
• Perform security code reviews across our codebases.
• Implement software supply chain security controls and verification systems.
• Audit, evolve and implement secure coding standards and practices.
• Build upon our existing security testing frameworks and procedures.
• Contribute to our security strategy
• Work closely with the CISO, Engineering and Infrastructure teams to implement security strategies across our product and architecture.
• Support security audit and compliance initiatives by helping retrieve the required evidence.
• Help evaluate and implement new security tools and technologies.
• Grow our security culture
• Develop and deliver security training materials.
• Collaborate with engineering teams to embed security practices into their day-to-day work.
• Create security documentation and guidelines.
• Automate everything.

• You have 3+ years of security engineering experience, or equivalent experience.
• You have strong expertise in application security and secure software development.
• You have experience implementing SAST and DAST.
• You have strong expertise in Python, with familiarity in TypeScript/Angular or similar technologies.
• You have extensive experience with the following technical stack: Kubernetes, Web application security, API security, including REST or GraphQL, Infrastructure as Code, CI/CD pipeline security, Container security, including Docker and OCI, Database security
• You have experience building security tools and automation.
• You understand software supply chain security.
• You have knowledge of modern development practices and tools.
• You are a pragmatic builder: you deliver practical security solutions with the teams' context in mind.
• You are a knowledge champion: you share your security expertise openly and positively, and build bridges with engineering teams.
• You strive for technical mastery, leveraging deep security expertise and engineering craftsmanship.
• You are fluent in English
• Будет плюсом: French fluency is a real plus!; Secure runtime environments, such as gVisor; GCP and Azure environments; Software Composition Analysis; Securing package management systems

• Условий в вакансии нет