Security Engineer Analyst

• Work with Security Engineering and Infrastructure / SRE and IT teams to strengthen Ledger’s network and access security model
• Map and document application and admin flows (who/what/where) and propose Zero Trust patterns (per-app access, identity-aware gateways, strong auth)
• Contribute to PoCs and integrations for ZTNA / SASE / secure access solutions (e.g. controlled access to cloud consoles, internal admin tools, and critical SaaS)
• Help define and document reference architectures, diagrams, and runbooks for secure remote access and network security
• Where relevant, contribute small scripts/tools (Python, shell, etc.) to automate validation, configuration checks, or data collection.

• Solid understanding of network fundamentals: TCP/IP, routing, DNS, VPN, HTTP(S), TLS
• Good grasp of core security concepts: Zero Trust, least privilege, segmentation, identity- and context-based access
• Comfortable with Linux environments and at least one scripting language (ideally Python) plus basic Git usage
• Interest in cloud environments (AWS/GCP/Azure or similar) and modern access patterns (bastions, proxies, SASE/ZTNA)
• Ability to read and challenge technical documentation and propose pragmatic improvements
• Proactive, curious, and willing to dive into low-level technical details
• Interest in Web3 and hardware wallets is a plus and provides useful context on Ledger’s ecosystem.

Interest in Web3 and hardware wallets.

• Comprehensive compensation packages that include a wide range of benefits
• Regionally specific benefits.