Security Engineer (Purple Team)

TL;DR

Security Engineer (Purple Team): Conducting offensive security assessments and threat validation to identify and remediate vulnerabilities within complex e-commerce business logic and infrastructure. Focus on automating detection rules, leveraging AI-assisted security tooling, and collaborating with product teams to ensure robust security posture.

Location: Paris (Hybrid)

Company

hirify.global is a leading e-commerce company specializing in flash sales and digital retail experiences.

What you will do

• Execute red team engagements, penetration tests, and phishing campaigns to identify logic flaws and security weaknesses.
• Validate emerging threats and risk register items through practical attack scenarios.
• Triage and qualify incoming Bug Bounty reports and security alerts.
• Convert confirmed attack paths into automated detection rules and hunting queries.
• Develop and improve internal security tooling, including AI-assisted code auditing and secret hunting.
• Drive remediation efforts by communicating findings to product and infrastructure teams and verifying fixes.

Requirements

• 3–5 years of experience in offensive security, detection engineering, or a mixed red/blue team role.
• Solid offensive skills including web/API penetration testing (OWASP) and Active Directory attack techniques.
• Proficiency in scripting and automation using Python, Bash, or PowerShell.
• French and professional English proficiency required.
• Strong communication skills to influence product teams and spread security culture.
• Ability to document findings in a clear and reproducible manner.

Nice to have

• Interest in AI-assisted security tooling such as LLM-based code audits and agentic workflows.