Security Engineer

Responsibilities

• ▹Automate and strengthen Identity and Access Management (IAM) together with the IT team (Terraform, Okta)
• ▹Improve software supply chain security as well as patch and vulnerability management programs
• ▹Develop security observability capabilities (monitoring, SIEM, alerting)
• ▹Design and deploy security mechanisms for corporate IT environments (ZTNA, SWG, etc.)
• ▹Contribute to application security through architecture and code reviews, and security assessments of new features
• ▹Take part in operational security activities: vulnerability and alert handling, incident response, and remediation coordination
• ▹Contribute to SOC 2 compliance and handle customer security questionnaires

Nice to have

• ▹Experience with GitLab CI pipeline security (SAST/DAST integration)
• ▹Familiarity with DAST tools such as StackHawk
• ▹Familiarity with secrets-detection tools such as GitGuardian
• ▹Familiarity with bug bounty platforms such as YesWeHack

About the company

GitGuardian is a global cybersecurity scale-up based in Paris, New York City, and Boston. Early investors include GitHub co-founder Scott Chacon and Docker co-founder Solomon Hykes; the platform is already used by more than 600K developers and 50 of the Fortune 500.