About the role
Are you looking to join a dynamic, international environment where the impact of your work is visible on a global scale? At Extia, our motto is "First who, then what." We put people and teamwork first to deliver high-impact solutions. As the No. 1 Great Place To Work® in France for 2024–25 and a Great Place To Work® in Europe for the seventh consecutive year, we are convinced that well-being at work drives performance.
We are looking for an experienced DevSecOps & Cloud Security Engineer to lead the protection of our clients' global cloud infrastructure and services. In this role, you will play a key part in ensuring the confidentiality, integrity, and availability of multi-cloud environments (AWS / Azure), applying a DevSecOps culture, advanced automation, and real-time incident response.
Responsibilities
•Design, configure, and secure cloud infrastructure (AWS / Azure) based on secure architectures and shared responsibility models.
•Monitor, detect, respond to, and mitigate security threats in real time.
•Configure and manage SIEM tools (Splunk, Microsoft Sentinel) and EDR tools (CrowdStrike, Defender for Endpoint) at an advanced level.
•Implement security controls through Infrastructure as Code (IaC with Terraform) and Policy-as-Code.
•Ensure operational stability and the automation of security policies.
•Protect container environments and apply hardening practices in Kubernetes.
•Ensure cloud infrastructure aligns with regulatory compliance frameworks (ISO 27001, NIST, CIS, GDPR).
•Work closely with development and operations teams to integrate security into the software lifecycle (DevSecOps) and support crisis management.
Requirements
•3 to 5 years of work experience in Cybersecurity or Cloud Operations, including at least 2 years of direct DevSecOps experience.
•Degree/Master's in Computer Science, Cybersecurity, Information Systems, or equivalent professional experience.
•Strong understanding of and hands-on experience operating and designing solutions in AWS and/or Azure.
•Proficiency in Terraform and fluency in scripting languages (Python, PowerShell, Bash, YAML, KQL, etc.).
•Demonstrable experience configuring and managing SIEM and EDR tools, and knowledge of network security principles (Firewalls, VPNs, WAFs).
•Familiarity with Docker security and Kubernetes hardening.
•Fluent English (B2+ / C1, written and spoken), essential for collaborating with international teams and stakeholders.
Nice to have
•Active certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or Azure Security Engineer Associate (AZ-500).
•Knowledge of and experience integrating security tools into CI/CD pipelines (GitHub Actions, Jenkins, Ansible).
•Experience with CSPM (Cloud Security Posture Management) and CWPP (Cloud Workload Protection Platform) solutions.
Conditions
•A hybrid model adapted to your project and work-life balance.
•A personalized training plan: we design your technical development and certification roadmap with you.
•Three points of contact: a Coach, a Manager, and an HR representative always by your side.
•A competitive benefits package: health insurance (including physiotherapy and psychology), meal vouchers, and transport.
•An international environment with more than 3,000 employees in Europe and Canada.
•A Great Place to Work culture based on closeness, transparency, and genuine support.
•Events, after-work gatherings, and an active community: team-building activities, charity initiatives, meetups, internal celebrations.
