Technical Leader DevSecOps / Application Security & AI – Senior @ Bank @ Lille

Project overview

Long-term mission · 12 months

Project details

Croix (59) – Hauts-de-France

Desired start date: January 4, 2027

Estimated end date: December 31, 2027

Remote work: Subject to manager approval

Experience required: Over 9 years

Environment: Banking sector, large account context

Context and challenges

As part of strengthening its application cybersecurity, a major player in the banking sector is looking for an Operational Security Technical Leader with strong expertise in DevSecOps, securing the software development lifecycle (SDLC), and application security governance.

Integrated into a DevSecOps Squad, the consultant will act as both a Level 3 (N3) technical expert and Product Owner (PO), with the objective of structuring, securing, and evolving cybersecurity products and services.

The mission revolves around several strategic challenges:

Detailed missions

Technical stack and expected expertise

Domain

Technologies / skills

DevSecOps

DevSecOps, GitHub

Application Security

SAST, DAST, code security

API Security

API Hardening, OAuth

Development Cycle

SDLC Security, Agent-based SDLC

Artificial Intelligence

AI applied to cybersecurity, AI-based Cyber tools

Cloud Security / Products

WIZ, VOC, Control Tower, Carnet de Santé

Management and Steering

Jira, product approach, Product Ownership

Governance

Security policies, application vulnerabilities, audits, compliance

Operational Security

N3 Expertise, supervision, MCO, incident management

Practical information

• Modernizing the security governance of code, APIs, artificial intelligence, and the SDLC.
• Structuring the Squad's product approach and preparing for the internationalization of its catalog.
• Evolving application vulnerability management towards product-oriented governance.
• Developing visibility and security management through indicators and reporting.
• Supporting the development of VOC and associated products: WIZ, Control Tower, and Carnet de Santé.
• Strengthening the security of the agent-based SDLC.
• Participating in the development of cybersecurity tools leveraging artificial intelligence.
• Technical leadership and management of the DevSecOps Squad
• Act as an N3 technical referent and Product Owner within the Squad.
• Organize and structure the product approach for cybersecurity services.
• Prepare for the internationalization of the security product catalog.
• Lead and support technical teams in implementing solutions.
• Define and implement technical security architectures.
• Recommend innovative solutions to improve security, quality, performance, and operating costs.
• Application security governance
• Update and evolve governance around the security of code, APIs, AI, and the SDLC.
• Support business teams in adopting a new product-oriented governance for application vulnerability management.
• Ensure the application and control of the security policy, particularly through periodic Level 1 controls.
• Investigate and approve requests for derogation from the security policy.
• Participate in internal and external audits.
• Implement audit recommendations and compliance actions.
• Write and maintain security guides, referentials, and standards.
• Securing the SDLC, APIs, and AI
• Support projects in securing their software development lifecycles.
• Strengthen DevSecOps practices and application security control mechanisms.
• Contribute to the integration and operation of static and dynamic code analysis tools (SAST/DAST).
• Support API hardening initiatives.
• Address authentication and authorization issues, particularly around OAuth.
• Support the security of the agent-based SDLC in the context of developments based on artificial intelligence agents.
• Participate in the development of cyber tools integrating artificial intelligence capabilities.
• Development and evolution of cybersecurity products
• Support projects in the development of VOC and its product ecosystem.
• Contribute to the evolution of WIZ, Control Tower, and Carnet de Santé solutions.
• Facilitate the integration of security tools and products into development and vulnerability management processes.
• Participate in the evolution of the cyber product catalog and its preparation for international deployment.
• Operational security, supervision, and reporting
• Define and implement security management indicators and reports.
• Ensure the operational maintenance of security infrastructures.
• Participate in the supervision, handling, and resolution of incidents and problems.
• Intervene in the installation and configuration of security solutions.
• Act as a referent for the technical implementation of solutions.
• Maintain technological watch on the evolution of cybersecurity tools, architectures, and practices.
• Location: Croix (59170), on-site presence.
• Remote work: Possible subject to managerial approval.
• Duration: Approximately 12 months.
• Start date: 04/01/2027.
• Estimated end date: 12/31/2027.
• Start: flexible
• Remote: hybrid
• Location: Lille, France, FR
• Rate: 87-87 EUR/h
• Languages: French