Security Engineer – Full Remote (France) or Hybrid

Job Description

Your Mission

As a Security Engineer , you’ll play a key role in shaping the security and resilience of Voyage Privé’s technology platform. You’ll work closely with Engineering, Product, and Platform teams to embed security practices into every stage of product development, deliver measurable impact, and help us scale efficiently while maintaining a strong security posture.

You’ll have the opportunity to build many security foundations from scratch — from internal tooling to CI/CD guardrails — and influence key architectural and technical decisions as we redesign our platform for scale.

Your key responsibilities will include:

• Strengthen the security posture across products, data and infrastructure : secure coding practices, code reviews, threat modeling, vulnerability remediation, cloud and network hardening.
• Develop automated security guardrails integrated into CI/CD pipelines (SAST, SCA, secrets scanning).
• Design secure architectures for applications , APIs, data flows, and integrations in partnership with engineering teams.
• Secure hybrid environments combining virtual machines, containerised workloads, and cloud‑native services, ensuring consistent security standards across the entire platform.
• Drive proactive risk identification through continuous scanning, threat modelling sessions, risk assessments, and architecture reviews.
• Enable engineering teams to build secure‑by‑design practices by acting as a trusted advisor, developing internal tools, and leading security awareness sessions.
• Operational security & incident readiness : participate in on‑call rotations, investigate security events, and improve incident response workflows.
• Lead security improvement projects : build automation, enhance tools, optimise processes, and foster a culture of security ownership.

Qualifications

What We’re Looking For

We’re looking for builders who move fast, think big, and care deeply about creating impact that lasts.

Your profile:

• 5–7 years of experience in software engineering, security engineering, DevSecOps or equivalent technical security roles.
• Strong development background (Python, Node.js, Java, Go, PHP or similar).
• Hands‑on experience with modern CI/CD systems (GitHub Actions, GitLab, Jenkins).
• Solid understanding of cloud security principles (AWS, GCP, Azure).
• Experience securing both virtualised systems (VMs) and containerised workloads.
• Strong knowledge of secure coding, OWASP Top 10, and application security fundamentals.
• Experience with SAST, SCA, container/IaC scanning, runtime security tools, IAM and secrets management.
• Pragmatic, engineering‑first mindset: able to balance security with developer experience, velocity and real‑world constraints.
• Excellent communication skills: able to translate complex security issues into actionable guidance for both technical and non‑technical stakeholders.
• Proactive, autonomous, critical thinker with a continuous improvement mindset.
• Nice to have: prior experience or knowledge of compliance requirements (GDPR, PCI‑DSS).
• Fluent in French and English.

Hiring Information

Location: Aix en Provence or remote, France.

Start Date: The sooner, the better.

Contract Type: Full‑time / Permanent.

Benefits

Our HQ in the South of France offers an exceptional environment – natural, cultural and digital – on a modern and eco‑responsible campus.

Prefer flexibility? We offer a hybrid model for all other positions with 3 mandatory on‑site days per week plus 4 fully remote weeks per year.

Employees enjoy access to a large on‑site fitness centre and a private court for padel matches.

Company events such as Company Breaks, Carnival, Annual Convention, meet‑ups and talks, free tickets to Provence Rugby home matches and live music nights at the Dalida Institute.

Travel perks: up to 20% off in exclusive getaway offers.

Join us and make your next career move a journey worth taking.