DevSecOps - Jissen

Project overview

Context:

The Jissen client is structuring its DevSecOps practices around AI and code assistants. The profile will join a squad of 6 people within the Digital department and will work with the DevSecOps, Cyber, AI, and security teams of the various entities of the group.

Activities:

Profile:

• Administer existing builder tools: GitHub, Artifactory (+ JFrog Xray), SonarQube.
• Define and implement the rules and policies for validated code assistants (GitHub Copilot, Claude Code).
• Define and implement controls and scans for the publication pipeline and the AI asset repository.
• Define and implement AI security rules: SBOM, data guardrails (egress, PII, secrets), non-human identities.
• Participate in the construction and maintenance of the "AI" part of the internal portal and hub.
• DevSecOps experience
• Expert administration of GitHub Enterprise Cloud and Server
• Advanced practice of AI code assistants (Claude Code, GitHub Copilot) and their enterprise configuration
• CI/CD (GitHub Actions) and quality gates
• English

Nice to have

• Administration of SonarQube Server and JFrog Artifactory Server
• SAST, SCA, secrets detection
• Security of MCP servers and registries
• Linux, scripting and automation (Python primarily)
• LLM and agent evaluation
• SBOM (CycloneDX, SPDX), signing, provenance, JFrog Xray
• SSO/SAML, SCIM, Okta, secrets management
• Knowledge of DORA/ACPR, AI Act, and ISO 27001

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 69-69 EUR/h
• Languages: French