Senior DevSecOps Engineer

Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time. 360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II.

Responsibilities

Make infrastructure secure by design, detectable by default, and provable at audit time; Act as the bridge between security and platform engineering; Be autonomous on the AKS and Azure environment and handle infrastructure related alerts end to end; Ship at least one concrete hardening or automation improvement in production; Own the infrastructure scope of vulnerability management, from triage to remediation follow up; Have the honeypot live and producing high fidelity alerts; Widen SIEM connector coverage, with documented log sources and retention; Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting; Manage detection content as code, with reviewed and tested rules and documented runbooks; Have largely automated audit evidence on the infrastructure scope; Eliminate long lived credentials on the critical paths

Requirements

5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice; Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security; Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too; Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines; Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams; Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources; Fluent English (US/UK) / B2 level or equivalent (FR); Enthusiasm for our working environment

Benefits

Compensation: base salary, a variable component and equity; Work From Home stipend; RTT; lunch vouchers; medical insurance; gym subscription; 1 month parental leave for the second parent; Flexible hours; full remote work possible anywhere in France; Diversity, Equity, and Inclusion ERGs; Corporate Social Responsibility programme