Security Engineer at Air Apps
France
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Lead threat modeling and security reviews for applications, APIs, and infrastructure.
- Run vulnerability scans, penetration tests, and security assessments; prioritize and track remediation.
- Define and promote secure coding practices; review code and design for security issues.
- Integrate security controls and automated tests into CI/CD pipelines (DevSecOps).
- Implement and maintain IAM, encryption, authentication, and data protection standards.
- Monitor security events with SIEM/IDS tools and lead incident response and post-incident RCA.
- Ensure compliance with relevant standards (GDPR, ISO 27001, SOC 2) and maintain security documentation.
Requirements:
- ~4+ years in cybersecurity, application security, or security engineering.
- Practical knowledge of OWASP Top 10, threat modeling, and secure development lifecycle (SDLC).
- Experience with vulnerability scanners and pentest tooling (Nessus, Qualys, Burp Suite or equivalents).
- Familiarity with SIEM, IDS, and security monitoring workflows.
- Scripting and automation skills (Python, Bash, PowerShell) to implement security checks.
- Hands-on experience securing cloud platforms (AWS/Azure/GCP), IAM, and encryption practices; strong communication skills.