Senior Cybersecurity Engineer

About the role

We are seeking a Senior Cybersecurity Engineer to join a fast‑growing technology team in France. In this fully remote position you will lead the design, implementation and continuous improvement of enterprise‑wide security programs across cloud, SaaS and modern development environments.

Key responsibilities

• Implement and maintain cybersecurity programs for cloud and corporate infrastructures.
• Manage compliance initiatives aligned with NYDFS Cybersecurity Regulation 500, ISO 27001, SOC 2, PCI DSS and other standards.
• Conduct vulnerability assessments, coordinate penetration testing and drive remediation.
• Monitor, investigate and respond to security events using AWS security services, SIEM platforms and other monitoring tools.
• Develop incident response procedures, IAM controls and security governance practices.
• Partner with engineering teams to embed security into the software development lifecycle through secure coding guidance, threat modeling and application security reviews.
• Support security audits, vendor risk assessments and prepare technical security documentation.

Required profile

• 7+ years of experience in cybersecurity engineering or information security, preferably in SaaS, cloud or fintech environments.
• Strong knowledge of AWS cloud security, IAM, security monitoring and logging.
• Hands‑on experience with compliance frameworks such as NYDFS, ISO 27001, SOC 2 or PCI DSS.
• Proven ability to lead vulnerability management, penetration testing and incident response activities.
• Excellent communication skills and experience supporting cross‑functional security initiatives.

Required skills

• AWS security services
• Identity and Access Management (IAM)
• Security Information and Event Management (SIEM) platforms
• Vulnerability management and penetration testing tools
• Incident response processes
• Application security and API security
• Secure Software Development Lifecycle (SDLC) practices
• OWASP Top 10
• Compliance frameworks: NYDFS, ISO 27001, SOC 2, PCI DSS

What we offer

• Competitive compensation package
• Fully remote work environment