Security Engineer, Scaleway
Pentester
Complete cloud ecosystem
Open for applications
Complete cloud ecosystem
501-1000 employees
Open for applications
501-1000 employees
Company mission
To build a more sovereign, sustainable, and human-first tech ecosystem.
Role
Who you are
- Hands-on experience with penetration testing (web, APIs, networks, infrastructures)
- Good knowledge of OWASP Top 10, MITRE ATT&CK, CVE and common exploitation techniques
- Experience with security tools such as Nmap, Metasploit, Burp Suite or OWASP ZAP
- Solid scripting or development skills (Python, Bash, SQL, PHP or similar)
- Understanding of vulnerability exploitation techniques such as XSS, SQL injection, buffer overflow or reverse engineering
- Strong analytical mindset and curiosity
- Creativity and “think outside the box” approach to problem solving
- High level of ethics and integrity in offensive security work
- Ability to write clear and structured reports
- Team spirit and collaboration mindset
What the job involves
- Our growth is driving us to strengthen our Trust & Security Operations team to expand our internal pentesting capabilities and strengthen the security posture of our cloud products
- Your mission will be to simulate realistic and controlled cyberattacks across our infrastructure and applications in order to identify vulnerabilities, evaluate associated risks, and continuously improve the security of Scaleway’s products and services
- We work in a collaborative and international environment where the diversity of Scalers, combined with a spirit of sharing, helps bring new projects to life every day, advancing our ambitions together
- You will be part of a team of 5 people within the security organization
- The team is responsible for protecting Scaleway’s infrastructure and products through proactive security initiatives, including SOC/CSIRT operations, secure development practices, and offensive security activities
- You will contribute to the Pentest initiative, helping design and build the internal pentesting stack while working closely with product and infrastructure teams to continuously improve security across Scaleway’s cloud services
- Conduct web, API, network, and infrastructure penetration tests on Scaleway products and internal systems
- Simulate realistic cyberattack scenarios to identify vulnerabilities and weaknesses
- Participate in Red Team or adversarial simulation exercises, including social engineering campaigns
- Assess and prioritize vulnerabilities based on their risk and potential impact
- Write clear and structured security reports and communicate findings to technical and non-technical stakeholders
- Collaborate with product and engineering teams to support remediation and security improvements
- Contribute to the design and implementation of the internal pentesting tool stack
- Stay up to date with emerging vulnerabilities, exploits, and offensive security techniques
- Support the continuous security testing workflow across Scaleway products
Application process
- HR interview to understand your background and motivations (30 min)
- Technical interview to understand your technical skills and approach to the role (1h)
- Manager interview to deepen discussions and assess your fit with the team (45 min)
Our take
Cloud computing is fast increasing in popularity and use, and many companies are turning to the cloud in order to better their functions. Scaleway enables developers and businesses to build, deploy and scale their applications for the cloud, with a focus on providing a range of options so that clients can access exactly what they need.
Scaleway, which labels itself “the cloud of choice”, delivers fully managed offerings for bare metal, containerisation, and serverless architectures. It is attractive, especially to startups, as it offers more flexibility than alternate cloud providers, and it boasts a smooth developer experience, carbon-neutral data centers, and native tools for managing multi-cloud architectures.
Scaleway is used by over 38,000 businesses in 160 countries. Aligning with its focus on bringing the cloud to startups, the company has launched a “Startup Program” where participators can earn cloud credits as well as gaining access to technical expertise and masterclasses. Scaleway has also partnered with Clever Cloud, in order to deliver an efficient alternative to for the automation of app deployment, enriching the product catalogues of both companies.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
19% employee growth in 12 months
Company
Company benefits
- 75% reimbursement on public transportation or 200€/year for sustainable mobility
- 200€ discount & 3 domains names on Scaleway Elements
- 120€ to equip yourself at home
- Freebox refund (€50 after 6 months)
- Up to €700 support for Babilou childcare
- Profit-sharing from the Iliad Group
- FlexiFamily: help with childcare, tutoring, and household tasks
- Extended parental and caregiver leave
- Employee share ownership plan at Iliad Group
- Referral Bonus
- 360Learning, Projet Voltaire and LinkedIn Learning free accesses
- Employee benefits through the Employee Work Council (CSE)
- Daily free breakfasts & snacks
- Onsite bedrooms showers and gym
- And all the usual perks provided in the industry (health insurance etc.)
Company HQ
Madeleine, Paris, France
Leadership
Albane Bruyas
(CCO & COO)Before joining Scaleway in 2019, Albane spent nearly 5 years at Toshiba as a Procurement & Purchasing Manager and Operations Director.
Damien Lucas
(CEO)Prior to joining Scaleway in 2023, Damien served as the CPO of Ateme. Before that, he co-founded Anevia where he spent 17 years in various roles, including CEO and CEO.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 29 more jobs at Scaleway