Senior Platform & Application Security Engineer (x/f/m)

What You'Ll Do

Join our Security team at the forefront of protecting sensitive healthcare data while enabling rapid, secure innovation! As part of our dynamic team, you'll be responsible for securing Doctolib's cloud infrastructure and application ecosystem, combining multi-cloud security expertise with application security knowledge.

Your responsibilities include but are not limited to:

• Design and implement security controls for multi-cloud infrastructure using Infrastructure as Code (Terraform, Kubernetes, ArgoCD, Gatekeeper, etc..)
• Develop and maintain automated security checks in CI/CD pipelines
• Lead security architecture reviews considering both infrastructure and application components
• Participate in security incident response and investigation processes
• Implement and maintain cloud and application security monitoring solutions
• Bridge platform and application security teams to ensure a cohesive security approach
• Perform purple exercise to battle test our infrastructure/application security
• Support compliance requirements across multiple cloud regions

Who You Are

Are you convinced you have what it takes? We encourage you to apply even if you don't meet every requirement. You could be our next team mate if you:

• Have 5+ years of experience in cloud and/or application security
• Possess strong knowledge of multi-cloud architectures and security best practices
• Have hands-on experience with Infrastructure as Code tools, particularly Terraform
• Demonstrate expertise in container security and Kubernetes
• Show proficiency in secure coding practices and OWASP Top 10

Now, it would be fantastic if you:

• Have experience with healthcare industry security requirements
• Bring knowledge of GitOps practices
• Show familiarity with cloud-native security tools
• Have experience in multi-cloud environments

What We Offer

• Free health insurance for you and your children
• Parent Care Program: receive one additional month of leave on top of the legal parental leave
• Free mental health and coaching services through our partner Moka.care
• For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support
• Work from EU countries and the UK for up to 10 days per year, thanks to our flexibility days policy
• Work Council subsidy to refund part of sport club membership or creative class
• Up to 14 days of RTT
• A subsidy from the work council to refund part of the membership to a sport club or a creative class 
• Lunch voucher with Swile card

Interview Process

• Initial call with Talent Acquisition
• Technical assessment
• Behavioral Interview
• At least one reference Check

Job Details

• Permanent position 
• Full Time
• Workplace: Paris
• Start date: asap
• Remuneration : fix + bonus on objectives (according to your profile)

If you would like to find out more about tech life at Doctolib, feel free to read our latest Medium blog articles!   At Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination.   The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, disability.   To ensure equal opportunities, we invite you to exclude personal information (e.g. pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process. Join us in building the healthcare we all dream of!   All information provided is processed by Doctolib for application management. For data processing details, click here.   Please contact hr.dataprivacy(at)doctolib.com for inquiries or to exercise your rights.