Technical Leader DevSecOps – Application Security & IT Security Governance

Project overview

For a division of a large group in the banking sector, we are looking for a Technical Leader DevSecOps to join a team dedicated to operational security and continuous improvement of application security practices.

Within a DevSecOps Squad, you will be involved in technical, governance, and management topics, with the objectives of strengthening the security of the software development lifecycle (SDLC), applications, and APIs.

Responsibilities

Profile Sought

Expected Skills

Application Security and DevSecOps

Tools and Environments

Complementary Expertise

Work Environment

• Act as a Level 3 technical referent and Product Owner within the DevSecOps Squad.
• Evolve the governance around the security of code, APIs, artificial intelligence, and the software development lifecycle (SDLC).
• Structure the Squad's product approach and contribute to the internationalization of the service catalog.
• Support business teams in implementing new governance for managing and tracking application vulnerabilities.
• Define and implement monitoring indicators and reporting.
• Support projects in the development and evolution of security solutions, particularly around VOC, WIZ, Control Tower, and application health checks.
• Contribute to securing development environments and SDLC processes, especially in their agent-based dimension.
• Participate in the design and development of cybersecurity tools integrating artificial intelligence capabilities.
• You have proven experience in cybersecurity, ideally in DevSecOps and application security environments.
• You have a good understanding of the security challenges of the software development lifecycle (SDLC), code, and APIs.
• You are capable of intervening in both technical issues and governance, management, and product organization topics.
• You have experience supporting development and business teams on security issues.
• You are proactive, autonomous, and able to unite different stakeholders around cross-functional topics.
• Experience in a banking environment or a large international group would be appreciated.
• DevSecOps and SDLC security.
• Code security and vulnerability analysis.
• SAST / DAST tools.
• API hardening and security.
• OAuth protocols.
• GitHub.
• Jira.
• Application security and vulnerability management solutions.
• WIZ and tools associated with cloud environment security.
• Artificial intelligence applied to cybersecurity.
• Security of agent-based development architectures and processes.
• Application security governance.
• Product management, definition of indicators, and reporting.
• Major client in the banking sector.
• Integration into a DevSecOps Squad dedicated to operational security.
• Transverse environment involving technical teams, development teams, and business stakeholders.
• Context of transformation and evolution of application security practices, with an international dimension and innovation challenges around AI.

Project details

• Start: 03/01/2027
• Duration: 2 ans renouvelable
• Remote: hybrid
• Location: Roubaix, Hauts-de-France, FR
• Languages: French