Security Engineer - Full Remote (France) or Hybrid

Security Engineer - Full Remote (France) or Hybrid

Full-time

Contract type: Permanent - CDI

Voyage Privé, founded in France in 2006, is a Europe-leading travel tech platform operating across 9 markets with tens of millions of users. We are driven by a mission-driven culture where performance meets impact. Our innovative campus brings together tech talent, professional athletes, students, and artists, creating an ecosystem where digital innovation drives business growth and positive change.

We are upgrading our entire technical foundation with cloud architecture, AI, and real-time systems to become a reference platform for luxury travel, known for excellent offers and customer experience, and by our providers as a high-performance business development partner.

As a Security Engineer , you’ll play a key role in shaping the security and resilience of Voyage Privé’s technology platform. You’ll work closely with Engineering, Product, and Platform teams to embed security practices into every stage of product development, deliver measurable impact, and help us scale efficiently while maintaining a strong security posture.

You’ll have the opportunity to build many security foundations from scratch — from internal tooling to CI/CD guardrails — and influence key architectural and technical decisions as we redesign our platform for scale.

Your key responsibilities will include:

• Strengthen the security posture across products, data, and infrastructure : secure coding practices, code reviews, threat modeling, vulnerability remediation, cloud, and network hardening.
• Develop automated security guardrails integrated into CI/CD pipelines (SAST, SCA, secrets scanning).
• Design secure architectures for applications , APIs, data flows, and integrations in partnership with engineering teams.
• Secure hybrid environments combining virtual machines, containerized workloads, and cloud-native services, ensuring consistent security standards across the entire platform.
• Drive proactive risk identification through continuous scanning, threat modeling sessions, risk assessments, and architecture reviews.
• Enable engineering teams to build secure-by-design practices by acting as a trusted advisor, developing internal tools, and leading security awareness sessions.
• Operational security & incident readiness : participate in on-call rotations, investigate security events, and improve incident response workflows.
• Lead security improvement projects : build automation, enhance tools, optimize processes, and foster a culture of security ownership.

We’re looking for builders who move fast, think big, and care deeply about creating impact that lasts.

Your profile:

• 5–7 years of experience in software engineering, security engineering, DevSecOps, or equivalent technical security roles.
• Hands-on experience with modern CI/CD systems (GitHub Actions, GitLab, Jenkins).
• Solid understanding of cloud security principles (AWS, GCP, Azure).
• Experience securing both virtualized systems (VMs) and containerized workloads.
• Strong knowledge of secure coding, OWASP Top 10, and application security fundamentals.
• Experience with SAST, SCA, container/IaC scanning, runtime security tools, IAM, and secrets management.
• Pragmatic, engineering-first mindset: able to balance security with developer experience, velocity, and real-world constraints.
• Excellent communication skills: able to translate complex security issues into actionable guidance for both technical and non-technical stakeholders.
• Proactive, autonomous, critical thinker with a continuous improvement mindset.
• Nice to have: previous experience or knowledge of compliance requirements (GDPR, PCI-DSS...)
• Fluent in French and English.

We believe in a fast, transparent, and human recruitment process.

Here’s what you can expect:

• Intro Call with a Talent Acquisition Partner (30–45 min) – Get to know each other. We’ll share more about the role, the team, and our culture.
• Manager Interview (60 min) – Deep dive into your experience, missions, and ways of working.
• Take-Home Task – Practical exercise to showcase your strategic thinking and approach to security.
• Task Debrief (60 min) – Discuss your task with members of the team.
• On-Site Interview (60 min) – Meet the VP of Engineering to align on expectations, culture, and long-term impact.

Location: Aix en Provence or remote, France. Start Date: ASAP. Contract Type: Full-time / Permanent.

We’ll loves joining us – Our campus offers a relaxed, eco-friendly environment with a modern lifestyle and opportunities for flexibility. We offer a hybrid model for all other positions with 3 mandatory on-site days per week plus 4 fully remote weeks per year. We provide opportunities to contribute to projects that connect business, sports, education, and social impact, and access to on-site facilities and events. We also offer travel-related benefits and a dynamic company culture.

Job Location

Aix en Provence or remote, France