Senior DevSecOps Engineer

Role overview Strengthen the security posture of a learning platform that serves thousands of organisations and tens of thousands of users, hosted on Azure and Kubernetes and certified to ISO 27001:2022 and SOC 2 Type II. As a Senior DevSecOps Engineer, you will turn manual security effort into automated guardrails and serve as the bridge between security and platform engineering.

Responsibilities - Design and build infrastructure that is secure by design, detectable by default, and provable at audit time. - Develop automated guardrails that replace repetitive manual security work and reduce time-to-fix. - Partner with security operations to define what to look for, then fix issues directly in the infrastructure stack. - Harden and govern the Azure and Kubernetes environment to meet the expectations of regulated customers and external assessors. - Take ownership of greenfield security engineering projects end to end within a small, senior team. - Support ongoing ISO 27001:2022 and SOC 2 Type II audit readiness through evidence, controls, and documentation.

Requirements - Deep hands-on experience with infrastructure on Azure and Kubernetes in production. - Familiarity with ISO 27001 and SOC 2 controls and the practical evidence they require. - Strong capability in detection, response, and infrastructure hardening, including the ability to investigate incidents and review insecure configurations. - Comfort working across security and platform engineering boundaries, from policy to implementation. - Autonomy to own projects end to end and the seniority to influence technical direction without layers of management.

Nice to have - Experience building automated compliance or audit evidence pipelines. - Exposure to scaling security practices alongside a growing customer base and broader detection scope.

Benefits and work setup - Compensation package including base salary, a variable component, and equity. - Benefits such as a remote-work stipend, RTT, lunch vouchers, medical insurance, gym subscription, and one month of parental leave for the second parent. - Flexible hours with full remote work possible from anywhere in France. - Active employee resource groups covering mental health, sustainability, women, parents, LGBTQIA2S+, and ethnic diversity, each sponsored by an executive team member. - Structured interview process spanning a recruiter screen, hiring-manager discovery, a live technical exercise, a clarification meeting, and a culture-fit conversation.