Senior Product Security Engineer

📋 Description

• Lead security gating for major feature releases across Consumer/OTC/MRE lines.
• Own secure SDLC with SAST/SCA/DAST, SARIF ingestion, and CI/CD security automation.
• Embed AI utilities/LLM agents into the secure development lifecycle safely.
• Direct threat modeling and architecture reviews for high-stakes flows (auth, payments, custody).
• Govern application security policies, reference architectures, and secure coding baselines.
• Oversee Bug Bounty triage and remediation strategy across products.

🎯 Requirements

• 4+ years in security engineering; 3+ years focused on application/product security or equivalent.
• Experience with Web, Mobile, Cloud, Infrastructure pentests and Red Teaming.
• Proven security automation using CodeQL/GHAS, Snyk; familiar with SARIF ecosystem and ASPM
• Audit/fix expertise in Kotlin/Java, TypeScript/JS, Python; experience with Kubernetes containerized
• Strong threat modeling and pragmatic guidance for financial flows (AuthN/AuthZ, cryptography
• Ability to build CI checks, test harnesses, and lightweight fuzzing/property tests.

🎁 Benefits

• Unlimited vacation policy.
• Unlimited books policy; access to technical resources from company library.
• Apple equipment provided.
• Full-time salary with meaningful equity.
• Role-based in-office presence four days/week in Paris.
• Work from Anywhere policy: up to 20 remote days/year.