Senior Security Engineer

📋 Description

• Partner with product squads on design reviews and threat modeling
• Secure authentication and authorization (OAuth, tokens, multi-tenancy)
• Run the code-security findings triage loop (SAST, SCA, secrets)
• Secure AI/LLM features and internal agents (prompt injection, PHI)
• Run the external testing program: pentests, vulnerability disclosure
• Build secure-by-default guardrails and PR checks

🎯 Requirements

• 5-8+ years in security engineering, 2-3 in application security
• Deep understanding of OAuth 2.0/OIDC, session design, OWASP Top 10
• Strong coder: Kotlin and Python, able to fix production code
• Experience with threat modeling and security design reviews
• Operated SAST, SCA, secrets scanning in CI with triage loop
• Full professional fluency in French and English