Senior DevSecOps Engineer

360LearningCybersecurity, e-learning

Full remote work possible anywhere in FranceFull-TimeSenior

SalaryPackage includes base salary, a variable component and equity

Apply NowOpens the employer's application page

Job Details

Languages: Fluent English (US/UK) / B2 level or equivalent (FR).
Experience: 5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice
Required Skills: PythonKubernetesAzureGoCI/CDTerraform

Have 5+ years of experience in infrastructure, cloud or platform engineering with a strong security focus, or security engineering with hands-on infrastructure practice.
Have production experience with Kubernetes, including RBAC, network policies, admission controllers, secrets handling, workload identity and runtime security.
Have solid cloud experience, ideally with Azure; strong AWS or Google Cloud experience is also relevant.
Have experience with infrastructure as code, including Terraform and GitOps workflows.
Have experience with CI/CD pipelines.
Be able to script and automate using Python or Go, plus shell.
Be comfortable reading and writing code and opening pull requests on repositories owned by other teams.
Have experience with log analysis and investigation, including cloud audit logs, query languages and correlation across identity, network and application sources.
Have fluent English and B2-level French or equivalent.

Map the Azure and AKS environment, detection and logging coverage, and ISO 27001 and SOC 2 control scope.
Handle infrastructure-related alerts end to end.
Ship infrastructure hardening and automation improvements to production.
Own infrastructure vulnerability management from triage through remediation follow-up.
Run infrastructure vulnerability remediation on a predictable cycle and report against SLAs.
Build and operate a honeypot that produces high-fidelity alerts.
Expand SIEM connector coverage and document log sources and retention.
Manage detection content as code with reviewed and tested rules and documented runbooks.
Automate audit evidence for the infrastructure scope.
Eliminate long-lived credentials on critical paths and enable secure defaults.

View Full Description & ApplyYou'll be redirected to the employer's site