360Learning
360Learning
201 – 500 Employees
EducationProductivitySaaS
360Learning develops collaborative learning software for organizations. Its SaaS platform helps learning and development teams create, share, and manage training with contributions from employees and subject-matter experts. By combining online learning with social collaboration, 360Learning supports workplace knowledge sharing, employee development, and learning programs designed to engage teams.

Senior DevSecOps Engineer — France Remote

Secure 360Learning’s collaborative learning platform across Azure and Kubernetes. Lead infrastructure guardrails, detection engineering, vulnerability remediation, and audit-evidence automation.

Description

  • Design 360Learning’s infrastructure for secure defaults, strong detection, and audit readiness.
  • Connect platform engineering with security operations by resolving infrastructure risks and supporting security activities.
  • Document the Azure and AKS environment, detection and logging coverage, and ISO 27001 and SOC 2 control scope.
  • Manage infrastructure security alerts from investigation through resolution.
  • Deliver production hardening and automation improvements.
  • Lead infrastructure vulnerability management from triage through remediation tracking.
  • Deploy and operate a honeypot that generates high-confidence security alerts.
  • Increase SIEM connector coverage while documenting log sources and retention requirements.
  • Establish a reliable vulnerability-remediation cadence with SLA reporting.
  • Maintain detection rules as reviewed, tested code supported by documented runbooks.
  • Automate audit evidence collection for infrastructure controls.
  • Remove long-lived credentials from critical paths and implement secure defaults.
  • Work closely with the CISO, Security Engineer, DevOps, platform engineering, and IT teams.
  • Contribute to alert triage and customer security assessments.
  • Deliver approximately half of the role’s greenfield engineering work from design through completion.

Requirements

  • At least 5 years of infrastructure, cloud, or platform engineering experience with a strong security focus, or security engineering experience with substantial infrastructure work.
  • Production Kubernetes experience covering RBAC, network policies, admission controllers, secrets management, workload identity, and runtime security.
  • Strong cloud expertise, preferably Azure; AWS or Google Cloud experience is also suitable with a genuine interest in transitioning.
  • Experience with Terraform, GitOps practices, and CI/CD pipelines for infrastructure as code.
  • Python or Go automation skills, along with shell scripting.
  • Ability to read and write code and submit pull requests to repositories maintained by other teams.
  • Experience investigating logs using cloud audit data, query languages, and correlation across identity, network, and application sources.
  • Fluent English at US/UK level, and French at B2 level or equivalent.
  • Interest in working within the Convexity environment.
  • Familiarity with ISO 27001:2022 and SOC 2 Type II security and compliance contexts.

Benefits

  • Compensation package with base salary, variable pay, and equity.
  • Work-from-home stipend.
  • RTT days.
  • Lunch vouchers.
  • Medical insurance.
  • Gym subscription.
  • One month of parental leave for the second parent.
  • Flexible working hours.
  • Fully remote work available anywhere in France.
  • Six active employee resource groups covering Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity.
  • Corporate social responsibility initiatives and a CSR Charter.
  • Convexity culture with an impact-oriented working framework.

Related Jobs