Cybersecurity Architect

Project overview

Context

We are looking for a Cybersecurity Architect to join the Expertise unit of the Cybersecurity team within the IT Department (DSI).

The Cybersecurity team is organized into three units:

We are looking for a profile with practical and real experience in DevSecOps and programming, as well as experience in technical security architecture for applications, platforms, and the Cloud.

Missions

Short-term objectives:

Tools & Environment

Working Conditions

• Governance: oversees all cybersecurity activities and consolidates risk management
• Operations: ensures daily defense, primarily through its Security Operations Center (SOC)
• Expertise: provides daily support to all internal clients through a Product offering (ISP, TPRM, etc.) and an Innovation offering (architecture, doctrine, prospective, etc.).
• Support agile teams to achieve a high level of security
• Pragmatically support teams in achieving compliance
• Establish doctrines (non-functional security requirements)
• Ensure regular technological monitoring and challenge existing solutions within the DSI
• Challenge the results of offensive audits (pentest, red teaming)
• Support agile teams in resolving detected vulnerabilities
• Contribute to the strategy and continuous improvement of the cybersecurity team's activities
• Take charge of other cross-functional cybersecurity topics as needed
• Support agile teams in improving their performance in DevSecOps aspects and securing applications using AI
• Support the operation and acculturation of cybersecurity solutions (DLP, CNAPP, SSE, VOC, DMARC, sovereign Cloud, etc.)
• Support the deployment of state-of-the-art encryption, particularly in preparation for the post-quantum transition
• Validate the cyber compliance of new IT platforms and applications
• CSP Certifications: AWS, Azure, GCP
• Development: programming experience
• Offensive Security: pentest, red teaming
• Methodologies: Agile, Scrum, SAFe
• Technical security concepts: network, API, web, system, cloud
• Risk assessment methodologies: ISO, NIST, etc.
• DevSecOps: SSDLC, SAST, DAST, SCA, CNAPP, CSPM
• Access Management: OIDC, SAML, SCIM
• Network: ADN, SASE
• Cloud: AWS, Azure, GCP, VMWare, Kubernetes
• Operating systems: Linux, Windows, MacOS
• Cryptography: certificates/CLM, PKI, KMS/HSM
• Artificial intelligence: LLM, MCP, agentic, Dust, Mistral, Copilot, agents
• Position to be filled within the IT Department
• Collaboration with agile teams and the IT department
• Cybersecurity-oriented mission with a strong focus on innovation and technical support

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 69-69 EUR/h
• Languages: French