Platform Security Engineer (x/f/m)

Responsibilities

We are representing a leading healthcare technology organization in Paris, and our talent team is seeking a Platform Security Engineer to join their security function.

In this role, you will protect sensitive healthcare data while enabling secure innovation across cloud infrastructure and application ecosystems. Your responsibilities will include:

• Owning platform security workstreams end-to-end, from architecture through enforcement—scoping initiatives with technical leadership, designing controls, progressive rollout (report-only to full enforcement), exception handling, and achieving complete coverage. Examples include hardening IAM across cloud accounts, tightening cluster admission policies, and eliminating classes of misconfiguration.
• Shipping all changes as code through Terraform and GitHub pull requests, peer-reviewed and reversible—no manual console changes or undocumented state.
• Hardening cloud and infrastructure baselines: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls—building guardrails and driving remediation with platform and engineering teams, converting recurring findings into automation.
• Leading incident investigations on the platform perimeter and continuously improving detection rules and response playbooks in Elastic SIEM.
• Working transparently: writing clear technical documentation, driving adoption of security changes across engineering teams, and growing through code review and pair programming.

What We're Looking For

Essential qualifications:

• 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure, or platform engineering, including exposure to a cloud environment (AWS, GCP, or Azure) in production—internships or apprenticeships count.
• Daily proficiency with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests and are comfortable operating and debugging workloads on Kubernetes.
• Regular use of AI coding assistants (Claude or equivalent) as part of your workflow.
• Experience carrying at least one project through to production and beyond initial deployment to actual adoption.
• Solid fundamentals in Linux, networking, cloud, Kubernetes, and development/scripting; pragmatic mindset; ability to make decisions under uncertainty and follow through; strong written communication skills for driving proposals from draft to cross-team adoption.
• Fluency in English (working language in writing); daily conversations occur mostly in French, so French proficiency or willingness to learn is highly valued.

Bonus qualifications:

• Experience with a SIEM platform (Elastic, Splunk, or equivalent), writing and tuning queries.
• Background in detection engineering, incident response, threat hunting, or CTFs.
• Public write-ups, open-source contributions, or home lab projects.
• Prior experience in regulated industries (healthcare, fintech, or public sector).

Technical environment: Terraform, AWS, Kubernetes, Elastic SIEM, Rails, TypeScript, Java, Python, Kotlin, Swift, React Native

Employment type: Permanent, full-time

Location: Paris (Levallois-Perret), hybrid work setup with up to 2 remote days per week

How We Work With You

Get A Job.ai represents exceptional candidates to our client organizations. When you apply through our platform:

• A recruiter from our team will screen your application and conduct an initial conversation.
• If there's a strong match, we will submit your profile to our client for consideration.
• Please do not contact the client directly—all communication flows through Get A Job.ai to ensure a smooth, professional process.

Our client's interview process typically includes technical interviews (feature building and system design), behavioral assessments, and reference checks.

Pay

Compensation details will be discussed during the screening process and are competitive for the Paris market.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices. We evaluate all candidates based on qualifications and experience, without discrimination based on gender, religion, age, sexual orientation, ethnicity, disability, or any other protected characteristic.