Security Engineer (Cloud & DevSecOps) Job at Phorest

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations.

Job Responsibility

Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline.
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure.
Participate in the design and implementation of security architectures, from the design to the risk assessment.
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis.
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement.

What we offer

Equity
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations.

Job Responsibility

Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure
Participate in the design and implementation of security architectures, from the design to the risk assessment
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement.

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations

Job Responsibility

Building and driving the cybersecurity transformation by integrating secure development practices, ensuring application security via automated scanning, and collaborating closely with the Infrastructure, Engineering, and The product security (Donjon) teams
Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure
Participate in the design and implementation of security architectures, from the design to the risk assessment
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products

Fulltime

Principal Security Engineer

We’re building a world-class global Security team as part of our Trust Program. ...

Location

India , Hyderabad

Salary:

Not provided

Highspot

Expiration Date

Until further notice

Requirements

10+ years of robust, progressive experience in security engineering, application security, DevSecOps, incident detection and response, or closely related fields
Advanced proficiency in at least one programming language (Python, Ruby, Go, Rust, JavaScript), with deep experience conducting detailed code reviews and security assessments across multiple languages
Hands-on experience with deploying, operating, and interpreting results from security tools such as static analyzers, web vulnerability scanners, supply chain analysis scanners, and host-based intrusion detection systems
Demonstrated experience mentoring, coaching and guiding junior and mid-level security engineers, contributing to a strong team culture, and supporting peer development as a senior individual contributor
Demonstrated proactive approach, strong continuous learning orientation, and curiosity about emerging threats, security trends, and innovative technologies
Extensive expertise securing cloud-native environments (AWS, Azure, GCP, containers, microservices), with in-depth knowledge of modern cloud security risks and defenses
Demonstrated ability to embrace being wrong, practice humility, continuously learn from experiences, and actively seek insights through thoughtful questioning and collaboration

Job Responsibility

Lead comprehensive application security assessments, advanced threat modeling sessions, and secure code reviews across critical product features, internal tooling, endpoints, and third-party integrations
Collaborate strategically with product engineering to establish and enhance secure-by-default and privacy-by-design practices within the software development lifecycle (SDLC)
Lead and otherwise participate in incident detection, investigation, triage, containment, and root cause analysis for high impact security incidents, providing mentorship and guidance to junior engineers as required
Drive the development and continuous improvement of sophisticated detection rules, response automation, and optimized alert management across cloud environments, corporate infrastructure, and SaaS platforms
Lead and participate in complex vulnerability remediation processes, and effectively respond to security issues discovered by both internal teams and external sources
Document technical findings and strategic decisions in a clear and accessible manner, and procedural enhancements
significantly contribute to comprehensive security playbooks and knowledge repositories
Manage and oversee asksecurity@ request handling, and actively participate in sprint-based security activities, balancing strategic and tactical execution
Actively participate in the security on-call rotation, or provide senior-level guidance as required during an event and aid in rapid response capabilities to protect our 24x7 platform and global workforce

Fulltime