Head of Security

You will own application, infrastructure, cloud, identity, access, vulnerability-management, detection, and incident-response security. You will define the security roadmap, lead compliance controls and evidence collection, support security due diligence, and help make security a business strength.

Responsibilities

• Own end-to-end application, infrastructure, cloud, identity, and access security
• Define the security roadmap and priorities
• Manage vulnerabilities, penetration testing, AI-driven security testing, detection, and incident response
• Lead ISO 27001 certification and DORA implementation
• Establish security policies, controls, and evidence collection
• Support security due-diligence questionnaires and presentations

Requirements

• 5+ years of experience in security engineering roles
• Understanding of application, network, and cloud security best practices
• Experience with security audits, vulnerability management, and compliance frameworks such as ISO 27001 or SOC 2
• Familiarity with SAST, DAST, dependency scanning, and container scanning
• Experience with automated penetration-testing tools or AI-driven security testing
• Ability to work autonomously and define a roadmap
• English proficiency

Benefits

• Stock options
• Remote work up to two days per week and one full remote week per month
• Latest-generation laptop and industry-leading software
• Health insurance fully covered
• Monthly perks budget
• 50% public-transport coverage or Forfait Mobilités Durables
• Referral bonus
• Regular afterworks and biannual offsites