Security Engineer (Cybersecurity)

TL;DR

Security Engineer (Cybersecurity): Building and maintaining a GRC framework to support cybersecurity governance, risk management, and compliance requirements with an accent on preparing for ISO 27001 and ACN certifications. Focus on conducting risk assessments, vendor security reviews, and internal audits to accelerate security as a business function.

Location: Hybrid position based in Paris, France. Up to 2 days per week remote work. Willingness to relocate to Paris is required if not already based there.

Company

hirify.global is a product-first team building a platform to help grow cybersecurity culture through engaging chat-based courses and phishing simulations for employees worldwide.

What you will do

• Build and maintain the GRC framework, including policies, procedures, risk registers, and controls.
• Conduct risk assessments, vendor security reviews, and internal audits.
• Prepare the organization for external audits and certifications (SOC 2, ISO 27001, ACN).
• Provide guidance and awareness to teams on security and compliance best practices.
• Work on additional security technical projects as needed.

Requirements

• 1-4 years of experience in security engineering or consulting.
• Familiarity with SOC 2, ISO 27001, and risk assessment methodologies.
• Hands-on experience with bug bounty programs, vulnerability management, and security questionnaires.
• Strong communication skills and ability to work collaboratively with cross-functional teams.
• Full professional proficiency in English.
• Native in French.

Nice to have

• You're a doer, not afraid to get things done.
• You have high standards for performance.
• You are enthusiastic about your work.

Culture & Benefits

• Join a financially strong company with significant capital efficiency.
• Contribute to a fast-moving environment with real growth (revenue grew 2x in 2025).
• Experience a collaborative team in a modern office in the heart of Paris.
• Committed to diversity and inclusion, fostering a valued and respected environment.

Hiring process

• First call with Tech Talent Acquisition Manager or Security Engineer (30min).
• Second call with Security Engineer (30min).
• Onsite case study with the CTO & Security Engineer (90min).
• Culture Fit interview.