About
Sekoia.io is reinventing cybersecurity to make it more relevant, effective and accessible. One of the main challenges they address is continuously analyzing and understanding emerging threats in order to define appropriate strategies and execute them at scale. By combining technology and a multidisciplinary team of Threat Intelligence enthusiasts, Sekoia.io has a strong impact on cybersecurity with an approach that breaks down silos, whether technological, organizational or cultural.
Responsibilities
Build and strengthen our security foundations
•Enhance and expand security controls across our Kubernetes infrastructure
•Develop security automation tools and frameworks, and put them into practice
•Strengthen the security of our CI/CD pipelines
•Help drive our patch management strategy and handle patch implementation
Secure our applications and software supply chain
•Perform security code reviews across our codebases
•Implement software supply chain security controls and verification systems
•Audit, evolve and implement secure coding standards and practices
•Build upon our existing security testing frameworks and procedures
Contribute to our security strategy
•Work closely with the CISO, Engineering and Infrastructure teams to implement security strategies across our product and architecture
•Support security audit and compliance initiatives by helping retrieve the required evidence
•Help evaluate and implement new security tools and technologies
Grow our security culture
•Develop and deliver security training materials
•Collaborate with engineering teams to embed security practices into their day-to-day work
•Create security documentation and guidelines
•Automate everything
Requirements
•3+ years of security engineering experience, or equivalent experience
•Strong expertise in application security and secure software development
•Experience implementing SAST and DAST
•Strong expertise in Python, with familiarity in TypeScript/Angular or similar technologies
•Extensive experience with the following technical stack: Kubernetes, Web application security, API security (including REST or GraphQL), Infrastructure as Code, CI/CD pipeline security, Container security (including Docker and OCI), Database security
•Experience building security tools and automation
•Understanding of software supply chain security
•Knowledge of modern development practices and tools
•Pragmatic builder: delivers practical security solutions with the teams' context in mind
•Knowledge champion: shares security expertise openly and positively, and builds bridges with engineering teams
•Strives for technical mastery, leveraging deep security expertise and engineering craftsmanship
•Fluent in English
Nice to have
•French fluency
•Experience with secure runtime environments, such as gVisor
•GCP and Azure environments
•Software Composition Analysis
•Securing package management systems
Conditions
No conditions specified in the posting.
