Security Engineer, GitGuardian
+ Stock-options
More information about location
2-5 days a week in office
Code security platform for the DevOps generation
Be an early applicant
Code security platform for the DevOps generation
101-200 employees
Be an early applicant
+ Stock-options
More information about location
2-5 days a week in office
101-200 employees
Company mission
To help organisations secure the modern way of building software and foster collaboration between developers, cloud operations and security teams.
Role
Who you are
- Fluency in English
- 1-2 years of experience as a security, infrastructure or software engineer
- Strong experience with scripting languages (Bash, Python)
- Experience with Infrastructure as Code tooling (Terraform, Kubernetes, Helm, Ansible) and with containerized systems
- Experience with CI/CD & toolchains
- Substantial experience in cloud & web application security
- Familiarity with the administration of SaaS tools (Google Workspace, Okta, …)
Desirable
- Speaking French
- Experience building security monitoring & alerting systems
- Experience with a software vendor scaleup
- Experience with SOC 2 or ISO27001 requirements
What the job involves
- As a Security Engineer within GitGuardian’s Security & IT team, you will work under the management of our Security lead and interact with all Guardians
- The Security & IT team is responsible for protecting all GitGuardian’s assets & systems, implementing guardrails enabling teams to deliver securely
- The team focuses on these four scopes: applications, infrastructure platform, IT & governance
- You’ll contribute to the security team’s general backlog, and your primary responsibility will be building scalable security mechanisms within GitGuardian’s software delivery pipeline, supply chain, service & corporate infrastructure
- Automating Identity and Access Management, using Terraform and Okta
- Advancing on securing our software supply chain, and patch and vulnerability management program by designing reliable and maintainable automations
- Improve our security observability & monitoring systems and processes
- Design and implement security mechanisms for corporate IT users (eg, ZTNA, SWG)
- Enhance our application security by participating in architecture and code reviews with our project managers and developers, performing pentesting of new features, and assisting in offensive engagements
- Handling reports from our bug bounty programs, ensuring timely coordination and remediation with relevant teams
- Responding to identified threats & vulnerabilities detected by our security stack (SIEM, WAF, EDR, DAST, …)
Application process
- Video call with a Talent Acquisition team member. To discover your professional project and evaluate if there could be a mutual match
- Interview with your future manager. To know more about yourself and your achievements, and present to you the team
- Technical interview. To evaluate your skills for the position and project yourself into the role
- Final interview with an Executive Manager. To detail our company’s vision and ambitions for the next couple of years
Our take
The twin uptakes of GitHub usage and cloud architectures have resulted in the propagation of digital authentication credentials in both public and private code repositories. Think APIs, cryptographic keys and login credentials.
GitGuardian has become 100,000s of developers’ wingman in identifying these secrets in real time, securing enterprise software with bottom-up adoption.
The startup has also built from its secret detection expertise and extended its technology to encode a wide variety of vulnerabilities to compete with legacy code security platforms. In 2021, GitGuardian raised an impressive $44 million in order to accelerate this innovation.
So far, GitGuardian’s laser-sharp focus on secret detection has allowed it to carve out a lucrative niche, but the expansion of its technology will bring it into direct competition with well-established cyber security giants. The company is gathering momentum, however, and is likely to scale in line with its technology in the coming years.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
62% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Dec 2021
$44m
SERIES B
Oct 2019
$10.8m
SERIES A
Total funding: $56.7m
Company benefits
- 🌴 A remote-friendly environment up to 3 days / week
- 💸 An attractive package that includes stock-options
- 💻 The latest setup equipment including cool apps, tools and technologies
- 👊 Working to develop a meaningful product → we already helped more than 200k developers!
- 🍺 Lots of team-building activities
- 🚀 Many opportunities for career development in the long term
- 📈 A strong engineering culture
- 🐕 Pet-friendly offices → every Guardian gets to bring their dogs to the office and we love it!
- 👫 Lots of trust & autonomy on your perimeter with a very transparent internal communication
Company HQ
Mail, Paris, France
Leadership
Eric Fourrier
(CEO & Co-Founder)Data science and Machine learning software engineer. Worked for credit scoring startup, Lending Club, in Paris before co-founding data science products consultancy alongside their eventual GitGuardian co-founder.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at GitGuardian