Security Engineer : 5 employeurs, un intitulé

Own and operate the ISO 27001 ISMS. You are the accountable owner of the Information Security Management System: scope definition, Statement of Applicability, internal audit programme, and management review. You've led at least one full certification or recertification cycle and know what breaks down in the months between audits. Be the security expert on regulatory and privacy matters. Legal leads on DORA, HDS, RGPD, PGSSI-S, and regulatory relationships. [...]

We're looking for a Senior Security Engineer to help secure and evolve our IT infrastructure and applications, spanning everything from corporate identity systems to the security of our quantum R&D labs. You'll own key security initiatives end to end, set standards and best practices across the company, and mentor junior engineers as you help shape our strategic security roadmap.

You'll be the security conscience for engineering: building tooling, training developers, and partnering with Infrastructure on secure-by-default solutions. You own the technical security roadmap: partnering with the compliance team to identify risks, translating findings into actionable engineering-native tools and processes, driving remediation, and raising the bar across the organisation. This is a pure engineering role, not governance or compliance: a separate team owns policy and risk frameworks. It's an individual contributor track with high influence, focused on technical depth, not people management. [...]

- Identifier et diriger des chantiers pour faire évoluer nos pratiques de sécurité dans toute l’entreprise - Contribuer à la vision technique globale aux côtés du CTO et des autres Staffs - Mettre en place des mesures pour sécuriser les ocmptes et les données de nos clients, ainsi que notre chaîne de développement logiciel - Améliorer notre MTTD et MTTR pour les failles et vulnérabilités de sécurité - Mise en place d’un monitoring continu de nos applications avec une stack moderne - Conduire des pentesting sur nos applications afin d’identifier des vulnérabilités [...]

As a Security Engineer at Youtrust, you are the embedded security partner for the entire company, with Product as your primary internal client. You lead Youtrust's security review cycle end-to-end on prioritized initiatives: from understanding the context of a new feature or project, to issuing your requirements and guidance, supporting implementation, and unblocking through risk management when needed. You own and operate the pentest and BugBounty programs and ensure consistent, pragmatic security coverage across all team initiatives, from Engineering and Product to cross-functional projects company-wide. [...]