Tech Lead DevSecOps & Application Security – Senior

Project overview

Context of the mission

As part of strengthening its cybersecurity strategy, a large group is looking for an experienced Tech Lead DevSecOps to support a team dedicated to securing application developments and evolving its security solutions.

The mission combines technical, governance, and product management aspects, with significant challenges around securing code, APIs, artificial intelligence, and the software development lifecycle (SDLC).

The consultant will act as a Level 3 (N3) technical referent and will also contribute to structuring the Product Owner (PO) approach within the DevSecOps team.

Main missions

Governance and application security

Product management and team support

Technical expertise and Cyber / AI innovation

• Evolve application security policies, standards, and processes, particularly on topics of code security, API security, and developments integrating AI.
• Strengthen security throughout the software development lifecycle (Secure SDLC).
• Support the implementation of structured governance for monitoring and processing application vulnerabilities.
• Define performance indicators and dashboards for tracking risks, vulnerabilities, and the effectiveness of security measures.
• Contribute to compliance checks, security audits, and the implementation of remediation plans.
• Structure the product approach of the DevSecOps team, participating in priority definition and activity organization.
• Prepare the international expansion of the security solutions and services catalog.
• Support business and technical teams in adopting new vulnerability management processes.
• Participate in the development and evolution of vulnerability management solutions and security posture management tools (VOC, Wiz, Control Tower, application health check).
• Ensure coordination with various stakeholders and contribute to the continuous improvement of offered services.
• Act as Level 3 expertise for application security and DevSecOps issues.
• Support the security of development environments integrating AI agents (agentic SDLC).
• Participate in the design and development of cybersecurity tools leveraging artificial intelligence capabilities.
• Contribute to defining and implementing security architectures and solutions adapted to project needs.
• Provide technical support to teams on API security, authentication, and access control topics.
• Participate in writing technical standards, technological watch, and identifying new security solutions.

Project details

• Start: flexible
• Remote: hybrid
• Location: Croix, France, FR
• Rate: 88-88 EUR/h
• Languages: French