Software Engineer - Security Features

About the role

Dashlane, a Paris-founded credential security company serving millions of consumers and over 25,000 brands, is looking for a Backend Software Engineer with a strong security background to join its product development team in Paris. The team builds features that improve user protection, strengthen identity and access controls and reduce security risks. You will design, build and operate backend services for security-sensitive features, working with product, design, infrastructure and the Security organization. The working language is English.

Key responsibilities

• Research, design, implement and maintain backend services for user-protection features across B2B and B2C products.
• Build features around identity, authentication, access control, threat prevention and other security-sensitive journeys.
• Work with Product and Security teams to turn security requirements and risk assessments into product features.
• Contribute to threat modeling and apply security best practices throughout the development lifecycle.
• Help improve resilience against account abuse, privilege misuse, insecure integrations and identity-related vulnerabilities.
• Take part in architecture discussions and make trade-offs balancing security, usability, maintainability and delivery speed.
• Write well-tested, maintainable code and support production services with observability and operational ownership.

Required profile

• Professional experience as a backend engineer delivering production systems in a SaaS or cloud environment.
• Strong experience building features that protect users and improve product security.
• Solid understanding of application security, secure design and threat modeling.
• Experience working closely with a CISO, Security team or equivalent security stakeholders.
• Good communication skills and fluency in English.

Required skills

• Backend development with modern languages and frameworks, ideally Node.js and TypeScript.
• API design, integration of external systems and running services in production.
• Cryptography and familiarity with IAM frameworks such as Passkeys, SAML, OAuth, SCIM.
• Preferred: authentication hardening, account recovery, access governance, fraud prevention, passwordless patterns, security reviews and incident follow-ups.

The team works in a hybrid model, meeting in the office on Mondays, Tuesdays and Thursdays.