Head of Security
Company: Spiko
About the Role
You will own application, infrastructure, cloud, identity, access, vulnerability-management, detection, and incident-response security. You will define the security roadmap, lead compliance controls and evidence collection, support security due diligence, and help make security a business strength.
Requirements
•5+ years of experience in security engineering roles
•Understanding of application, network, and cloud security best practices
•Experience with security audits, vulnerability management, and compliance frameworks such as ISO 27001 or SOC 2
•Familiarity with SAST, DAST, dependency scanning, and container scanning
•Experience with automated penetration-testing tools or AI-driven security testing
•Ability to work autonomously and define a roadmap
•English proficiency
Responsibilities
•Own end-to-end application, infrastructure, cloud, identity, and access security
•Define the security roadmap and priorities
•Manage vulnerabilities, penetration testing, AI-driven security testing, detection, and incident response
•Lead ISO 27001 certification and DORA implementation
•Establish security policies, controls, and evidence collection
•Support security due-diligence questionnaires and presentations
Benefits
•Stock options
•Remote work up to two days per week and one full remote week per month
•Latest-generation laptop and industry-leading software
•Health insurance fully covered
•Monthly perks budget
•50% public-transport coverage or Forfait Mobilités Durables
•Referral bonus
•Regular afterworks and biannual offsites
Hiring Process
Screening call; hiring-manager interview; technical infrastructure and security interview; hands-on technical session; founder interviews; reference check; offer.
