Security Engineer

About the role

Youtrust is expanding its Digital Trust chain and needs a Security Engineer to act as the embedded security partner for the whole company, primarily supporting Product teams. You will lead security reviews, manage the BugBounty program, and contribute to regulatory compliance and fraud prevention.

Key responsibilities

• Lead end‑to‑end security review cycles for new features, from context intake to risk‑based unblocking.
• Own and operate the BugBounty program: triage reports, drive remediation, and decide rewards.
• Identify, prioritize, and track remediation of vulnerabilities across product and infrastructure.
• Support eIDAS, NIS2, and ISO 27001 compliance by translating requirements into technical controls.
• Participate in on‑call rotation and build automation (n8n, AI tooling, alerting) to reduce manual toil.
• Raise the security bar by coaching teams on secure‑by‑design practices and sharing knowledge.

Required profile

• Deep hands‑on expertise in web application and API security, able to spot vulnerabilities in code or architecture.
• Experience running threat‑modeling sessions and producing clear decision records.
• Proven track record managing vulnerabilities and BugBounty programs.
• Comfortable using AI to automate security tasks such as CVE monitoring and report generation.
• Native‑level French and professional English communication skills.

Required skills

• Web application security
• API security
• Threat modeling
• BugBounty program management
• CVE monitoring
• AI‑driven automation (e.g., n8n)

What we offer

• Salary range €53,000 – €79,000 per year
• Stock options (BSPCE)
• Meal vouchers (Swile) with 50% company contribution
• Life & disability insurance fully covered by employer
• Wellbeing support: physiotherapy and therapy/coaching sessions
• 50% public‑transport reimbursement for hybrid workers
• Employee discounts via Leeto, 10 RTT days, parental benefits, volunteering day, learning budget