Top Cybersecurity Jobs in France

Build and ship customer-facing, AI-powered application security features. Own architecture, implementation, deployment, and iteration. Work with product, design, and users; leverage LLMs and agentic systems for vulnerability management. Advocate for tested code, fast CI, and observability while shaping product direction and technical culture.

Lead application and product security for Criteo by partnering with Product and Platform teams to design secure systems, perform threat modeling and vulnerability management, build security tooling and automation, run architecture reviews and incident response, drive shift-left practices, define security standards and KPIs, and lead cross-functional security projects while mentoring peers.

Hands-on security engineer responsible for vulnerability triage, bug-bounty management, code-level investigations (Rust/Go/Python), cloud and container security (AWS, Kubernetes), securing CI/CD and GitHub orgs, incident response, security automation, metrics/reporting, and building guardrails across the development lifecycle.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead product security reviews end-to-end, run pentest and BugBounty programs, triage and track vulnerabilities, support Trusted Zone security and fraud prevention, translate regulatory requirements (eIDAS, NIS2, ISO 27001) into controls, automate toil (n8n, AI tooling), participate in on-call rotation, and raise security practices across the company.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Lead GRC activities for a cloud SaaS provider: manage compliance programs (SOC, ISO, PCI, SecNumCloud, etc.), handle customer audits and questionnaires, evaluate technical controls across networks and cloud, run risk management and continuous compliance monitoring, and coordinate security exercises like BIA, DR tests, and access reviews.

Embed security into product and platform lifecycles by partnering with developers, automating vulnerability triage, securing CI/CD pipelines and execution environments, tuning WAFs, managing cloud security and Terraform practices, supporting internal access and endpoint hardening, leading security reviews, and advocating security standards to enable faster, safer releases and reduce reactive escalations.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Lead architecture and scaling of a cross-platform endpoint agent (macOS/Linux/Windows) that detects secrets on developers' machines. Mentor engineers, drive technical decisions, contribute core Rust and Python/Django code, collaborate with Product, and ensure compliance and secure cloud deployments.

Part-time research internship (Alpic + MICS) studying security of LLM + MCP server systems. Investigate attack vectors, develop and train a guardrail classifier to scan MCP inputs/outputs, and train models on Alpic production data. Potential to convert to full-time.

Lead and operate global network security: design and implement security for LAN/WAN/Wi‑Fi, firewalls, proxies and VPNs; manage incidents, third‑level troubleshooting, vendor relationships, change control, continuity and network security roadmap; collaborate with regional network, security and service teams.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Deliver and assess cyber security controls across the NIST framework for LCH SA, manage vulnerability and incident processes, oversee outsourced security services, produce SLA/KPI reporting, automate control checks via scripting, and support IT security colleagues to ensure a resilient, compliant information system for a regulated financial clearing house.

Design, implement, and maintain cybersecurity solutions for government and critical infrastructure. Integrate security controls, monitor SIEM events, remediate vulnerabilities, secure on-prem/cloud/hybrid environments, automate detection/response, produce risk and audit documentation, and advise stakeholders.

Lead strategy and roadmap for Operations Security product family, covering IAM, network and cloud security. Manage demand and backlog, own EPICs, oversee ITFM and product lifecycle, coordinate squads and resources, engage stakeholders (CISO, global teams), and ensure delivery of security operations excellence and value realization.

Advise and design Microsoft security architectures (EMS, Defender, Azure Sentinel, identity/PAM/PIM), analyze and validate technical solutions, oversee implementations, provide presales input, perform technology watch, and support delivery teams.

Enterprise-focused sales specialist driving adoption of SASE and networking security solutions. Build and manage pipeline, collaborate with account teams and partners, position SASE offerings, win new logos, and grow/renew revenue in mid-to-large accounts.

Lead hands-on security engineering: harden AWS, Kubernetes, and apps; implement SAST/DAST and dependency scanning; manage vulnerability program and incident response; build security training, policies, endpoint standards, and security champion network to support enterprise sales and protect user data.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

Own a UK region and build a pipeline of strategic, high-value accounts. Execute consultative account plans from prospecting through close, engage CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, accurately forecast revenue, and contribute go-to-market feedback.

Design, build, and operate multi-region VM and Kubernetes infrastructure on GCP and AWS. Lead IaC standards with Terraform/Spacelift, implement observability (Grafana/Prometheus/OTel), manage core platform services (DNS, certs, ingress, service mesh), drive automation and CI/CD, mentor engineers, and participate in 24x7 on-call incident response and post-incident reviews.

Build and own end-to-end TypeScript features across a monorepo: design typed HTTP APIs, model and query PostgreSQL, implement React SPAs with modern tooling, write unit/integration tests, use AI-assisted tools responsibly, review code, and collaborate with Product and QA to ship secure, reproducible software.

Lead Upwind's enterprise sales efforts in France: build pipeline, own complex end-to-end sales cycles, engage C-suite and technical buyers, collaborate with technical teams, cultivate channel and cloud provider partnerships, and deliver predictable, data-driven revenue growth across the region.