360Learning
360Learning
201 – 500 Angajați
EducațieProductivitateSaaS
360Learning dezvoltă software colaborativ pentru învățare destinat organizațiilor. Platforma sa SaaS ajută echipele de învățare și dezvoltare să creeze, să distribuie și să gestioneze cursuri de formare cu contribuții din partea angajaților și a experților în domeniu. Combinând învățarea online cu colaborarea socială, 360Learning sprijină schimbul de cunoștințe la locul de muncă, dezvoltarea angajaților și programe de învățare concepute pentru a implica echipele.

Senior DevSecOps Engineer — France Remote

Secure 360Learning’s collaborative learning platform across Azure and Kubernetes. Lead infrastructure guardrails, detection engineering, vulnerability remediation, and audit-evidence automation.

Descriere

  • Design 360Learning’s infrastructure for secure defaults, strong detection, and audit readiness.
  • Connect platform engineering with security operations by resolving infrastructure risks and supporting security activities.
  • Document the Azure and AKS environment, detection and logging coverage, and ISO 27001 and SOC 2 control scope.
  • Manage infrastructure security alerts from investigation through resolution.
  • Deliver production hardening and automation improvements.
  • Lead infrastructure vulnerability management from triage through remediation tracking.
  • Deploy and operate a honeypot that generates high-confidence security alerts.
  • Increase SIEM connector coverage while documenting log sources and retention requirements.
  • Establish a reliable vulnerability-remediation cadence with SLA reporting.
  • Maintain detection rules as reviewed, tested code supported by documented runbooks.
  • Automate audit evidence collection for infrastructure controls.
  • Remove long-lived credentials from critical paths and implement secure defaults.
  • Work closely with the CISO, Security Engineer, DevOps, platform engineering, and IT teams.
  • Contribute to alert triage and customer security assessments.
  • Deliver approximately half of the role’s greenfield engineering work from design through completion.

Cerințe

  • At least 5 years of infrastructure, cloud, or platform engineering experience with a strong security focus, or security engineering experience with substantial infrastructure work.
  • Production Kubernetes experience covering RBAC, network policies, admission controllers, secrets management, workload identity, and runtime security.
  • Strong cloud expertise, preferably Azure; AWS or Google Cloud experience is also suitable with a genuine interest in transitioning.
  • Experience with Terraform, GitOps practices, and CI/CD pipelines for infrastructure as code.
  • Python or Go automation skills, along with shell scripting.
  • Ability to read and write code and submit pull requests to repositories maintained by other teams.
  • Experience investigating logs using cloud audit data, query languages, and correlation across identity, network, and application sources.
  • Fluent English at US/UK level, and French at B2 level or equivalent.
  • Interest in working within the Convexity environment.
  • Familiarity with ISO 27001:2022 and SOC 2 Type II security and compliance contexts.

Beneficii

  • Compensation package with base salary, variable pay, and equity.
  • Work-from-home stipend.
  • RTT days.
  • Lunch vouchers.
  • Medical insurance.
  • Gym subscription.
  • One month of parental leave for the second parent.
  • Flexible working hours.
  • Fully remote work available anywhere in France.
  • Six active employee resource groups covering Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity.
  • Corporate social responsibility initiatives and a CSR Charter.
  • Convexity culture with an impact-oriented working framework.

Locuri de muncă similare

TÜV TRUST IT Unternehmensgruppe TÜV AUSTRIA

Junior Security Auditor, Electronic Identities and Trust Services

TÜV TRUST IT Unternehmensgruppe TÜV AUSTRIA

Advise on and audit electronic identities and trust services for TÜV’s information security certification work. Assess security controls, report findings, and coordinate complex compliance projects.

Deschide