This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
GitGuardian is a global cybersecurity scale-up. The company is based in Paris, New-York City, Boston. Among our early investors who saw our market value proposition, are the co-founder of GitHub, Scott Chacon, along with Solomon Hykes, Docker's co-founder. American and European top-tier VC firms have also invested in GitGuardian. GitGuardian leads the way in Non-Human Identity security, offering end-to-end solutions from secrets detection in code, productivity tools and environments to strong remediation, observability and proactive prevention of leaks. Our solutions are already used by more than 700K developers worldwide! The Security & IT team is responsible for protecting GitGuardian's infrastructure, applications, and internal access systems, while ensuring compliance with security standards and customer requirements. It operates in a highly cross-functional way, working closely with engineering teams (product and infrastructure) to secure systems, support developers in building secure software (code reviews, security audits, awareness), and handle operational security and compliance topics (IAM, vulnerability management, alerting, incident response). The team also plays a key role in addressing customer security requirements and maintaining GitGuardian's trust standards.
Job Responsibility
Automate and strengthen Identity and Access Management (IAM) in partnership with the IT team (Terraform, Okta)
Improve software supply chain security, as well as patch management and vulnerability management programs
Design and deploy security mechanisms for corporate IT environments (ZTNA, SWG, etc.)
Contribute to application security through architecture and code reviews, as well as security assessments of new features
Take part in operational security activities: vulnerability and alert handling, incident response, and remediation coordination
Contribute to SOC 2 compliance and handle customer security questionnaires
Requirements
You have at least 2 years of experience as a security, infrastructure, or software engineer
You know how to automate your workload using scripting languages (Bash, Python)
You are comfortable working in containerised environments (Docker at minimum, Kubernetes is a plus)
You understand the principles of Secret Management: never hardcode secrets, environment separation, rotation, least privilege
You know the basics of cloud and web application security
You are familiar with the administration of SaaS tools (Google Workspace, Okta, or equivalent)
You take initiative without being asked, own your work end to end, and look for impact beyond your immediate scope
You are open to using AI tools as part of your day-to-day work
You are fluent in English
Nice to have
Experience with Infrastructure as Code tooling (Terraform, Kubernetes, Helm, Ansible)
Experience building security monitoring and alerting systems (SIEM)
Experience with SOC 2 or ISO 27001 requirements
Experience with a software vendor scaleup
Familiarity with OWASP Top 10 and auditing methodologies
Speaking French
What we offer
Package that includes BSPCE
Lunch voucher (Swile, 9€ at 50%)
Sponsored Wellpass (gymlib)
Non-charged health insurance for children (Sidecare / Generali)
Up to €300 to improve your home office set-up
Yearly holiday allowance
Referral bonus of 4000€ for any new Guardian we might hire thanks to you
Team building: monthly budget dedicated to each employee that you can spend as you wish, with colleagues (latest examples to date: Michelin star restaurant, karaoke, stand-up show, kitesurfing week-end, ...)
Remote policy: hybrid (3 days/week at the office in Paris)
Opportunities for career development in the long term