обновлено 2 часа назад
Principal Security Engineer, Product & Infrastructure
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Principal Security Engineer, Product & Infrastructure (AI platform security): Owning and building Pigment's product, infrastructure, and CI/CD security roadmap with an accent on threat modeling, vulnerability management, detection engineering, and incident response. Focus on securing AI features and agent identity, designing least-privilege access, and improving security automation across production systems.
Location: Remote from France
Company
develops an AI platform for business planning.
What you will do
- Own and execute the security roadmap across the product, infrastructure, and CI/CD environment.
- Design security features, threat model new services, and make architectural decisions for product and platform security.
- Review code, architecture, and configuration; assess risk and provide practical security solutions to product and engineering teams.
- Run assurance and testing activities, including internal reviews, red team exercises, bug bounty operations, auditor relationships, and certification KPIs.
- Manage vulnerabilities from detection and triage through mitigation validation and verified remediation.
- Build detection capabilities, response playbooks, and lead production security and fraud investigations end to end.
Requirements
- At least 8 years of security experience as a Security Engineer, Pentester, or Security Consultant, with substantial depth in product and/or infrastructure security.
- Experience owning a product or platform security roadmap end to end.
- Ability to drive security initiatives through engineering teams without direct authority and make difficult architectural decisions.
- Hands-on experience across development, databases, networking, and web technologies.
- Fluent English required; French is a strong plus.
- Strong experience with relevant production technologies such as GCP, Kubernetes, Terraform, Postgres, Vault, Okta, OAuth, JWT, and CI/CD systems.
Culture & Benefits
- Hands-on individual contributor role with no people-management responsibilities.
- Seven-person security team with dedicated ownership across compliance, governance, and security operations.
- Remote work stipend and high-end equipment, subject to stock and availability.
- Free health insurance for the employee and family, lunch vouchers, and access to gyms and wellness spaces across France.
- Annual learning stipend, stock options, and one company offsite each year.
- Access to offices in New York, San Francisco, Toronto, Paris, and London.
Hiring process
- Initial recruiter call followed by five conversations over approximately two to three weeks.
- Interviews cover ways of working, a technical deep dive with a practical exercise, cross-functional collaboration, ownership and career, and a final discussion with the co-founder and CTO.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →