Cybersecurity Team Lead, Mistral AI

• 6+ years of experience in Information Security, with a specific focus on Application Security, Cloud Security, or DevSecOps
• Strong scripting skills (Python, Go, or Bash) to automate security tasks and integrate tools
• Deep understanding of CI/CD ecosystems and container orchestration (Kubernetes/Docker)
• Hands-on experience with modern security tooling (e.g., Wiz, Snyk, SonarQube, Prisma, or similar enterprise tools)
• Collaborative mindset: you view developers as partners, not adversaries, and focus on enabling them to code securely
• Clear communication, autonomous, and capable of translating technical security risks into actionable engineering tasks

Desirable

• Embedded directly within Mistral's Security Engineering ecosystem, you will architect and enforce the security posture of our entire technical stack, from on-premise foundations to cloud-native deployments
• You'll own the vulnerability management lifecycle end-to-end: define security standards, automate detection within the development lifecycle, and facilitate rapid remediation
• Work closely with SRE and Engineering to deliver robust, secure applications and infrastructure without compromising on velocity or innovation
• Reporting line: Reports to the Chief Information Security Officer
• Oversee the identification, prioritization, and remediation of vulnerabilities across both On-Prem and Cloud infrastructures as well as internal applications
• Select, deploy, and maintain the tools needed for visibility and protection, including CNAPP, CSPM, SAST/DAST, secret scanning, and SBOM/CVE tracking
• Integrate security controls and automated gates directly into CI/CD pipelines to catch vulnerabilities before deployment (Shift Left)
• Partner with engineering teams to interpret findings and "ease the fix," providing patches, code snippets, or architectural advice to resolve issues quickly
• Define and maintain rigorous security guidelines and best practices for developers and system administrators
• Design and lead security awareness programs and technical training tailored for developers and admins to reduce human risk
• Track and define key security metrics (MTTR, coverage, vulnerability density) to visualize posture and progress to leadership

• Introduction call (30 min)
• Hiring Manager (30 min)
• Technical Rounds: - Technical Round (75 min)
• Value talk / Culture fit (30 min)
• References