Senior Security Engineer - SecOps (x/f/m)
Doctolib is looking for a Senior Security Engineer for its SecOps team. Your mission will be to protect the infrastructure, identities, devices and platform relied on daily by millions of patients and hundreds of thousands of health professionals. You will work hands-on across the full corporate IT security perimeter (identity, endpoint, SaaS, network and cloud) in a highly regulated environment (HDS, ISO 27001, C5) where security directly impacts patient safety. The role is a full-time permanent position in Paris with a hybrid setup (up to 2 remote days per week).
Responsibilities
- ▹Design and ship security changes as code, reviewed in pull requests like any production change, across the identity, endpoint, SaaS and network security stack
- ▹Build detections, dashboards and automated responses on top of the SIEM (Elastic), writing queries and continuously tuning alert quality
- ▹Drive corporate IT security programs from architecture to enforcement spanning Entra ID, CrowdStrike, Wiz and Cloudflare
- ▹Investigate security incidents end-to-end and iterate on playbooks with each resolution cycle
- ▹Write proposals and run cross-team change management on major security initiatives, ensuring robust stakeholder communication
- ▹Mentor junior engineers and contribute to platform security topics when initiatives span both corporate and product perimeters
Requirements
- ▹5+ years of hands-on corporate security experience, including at least 2 years at a senior level, with end-to-end ownership of multiple security domains (identity, endpoint, SaaS, network or detection) in production
- ▹Strong daily mastery of GitHub, Terraform and AI coding assistants (Claude or equivalent) — shipping security work as code reviewed in PRs, with AI agents as a structural part of the workflow
- ▹Solid detection engineering and SIEM background, comfortable writing queries and tuning alerts independently
- ▹Pragmatic mindset and strong written communication, with the ability to make decisions under uncertainty and follow through on complex, cross-team initiatives
- ▹Fluent English (primary written working language); daily team conversations happen mostly in French, so speaking French or being willing to learn is a strong plus
Nice to have
- ▹Curiosity for platform security topics (cloud, Kubernetes, supply chain) and willingness to contribute beyond the core corporate IT perimeter
- ▹Prior experience in a regulated industry such as healthcare, fintech or the public sector
Soft skills
What we offer
- ▹Free comprehensive health insurance (basic package) for you and your children
- ▹25 days of paid vacation per year, plus up to 14 days of RTT
- ▹Free mental health and coaching services through Moka.care
- ▹Work from abroad for up to 10 days per year
- ▹Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib
- ▹Work council subsidy for sport club or creative class membership
- ▹50% reimbursement of public transport subscription
- ▹Parent Care Program: one additional month of leave on top of legal parental leave
- ▹Enrollment in the DoctoGrowth long-term employee value sharing plan
- ▹Support package for caregivers and workers with disabilities
- ▹Relocation support in case of international mobility
- ▹Access to the best AI tools for coding and dedicated training
About the company
Doctolib builds innovative products and features to improve the daily lives of care teams and patients. Its solutions run on a single fully cloud-native platform supporting web and mobile interfaces, multiple languages and country- and specialty-specific requirements. The stack includes Rails, TypeScript, Java, Python, Kotlin, Swift and React Native, and AI is used ethically across the products.