The role

You join the Cybersecurity Architecture practice as a junior (2 to 5 years of experience) or senior profile (5+ years). With the Trusted Integration offer, you build security into our clients’ software delivery pipelines.

Responsibilities

  • Design and build secure software factories: continuous integration and delivery pipelines with automated security analysis (SAST, DAST, container images, dependencies, SBOM).
  • Segment environments, manage identities, access and secrets, express security rules as code.
  • Assess an organisation’s DevSecOps maturity and recommend next steps.
  • Coach the client’s project teams in adopting the practices, up to handover.

Profile

  • 2 to 5 years (junior) or 5+ years (senior) of experience in DevOps or DevSecOps.
  • Hands-on experience of CI/CD pipelines, containers and orchestrators, and security analysis tools.
  • Knowledge of application security (OWASP) and software supply chain security.
  • The role builds security into the client’s pipelines: it does not include application development.
  • Valued certifications: CKS, CSSLP.
  • Fluent French and professional English, written and spoken.

Conditions

  • Permanent contract (CDI), fixed gross annual salary: €42,000 to €50,000 for a junior profile (2 to 5 years of experience), €58,000 to €68,000 for a senior profile (5+ years), depending on experience; meal vouchers at €14.52 per day
  • A performance-based bonus on top of the fixed salary
  • Mostly remote, with presence in Paris for key meetings and team events, and at clients’ premises depending on the engagement
  • Offices at 198 Avenue de France, 75013 Paris (metro line 6, Quai de la Gare, close to metro lines 5 and 14 and RER C)
  • SYNTEC collective agreement, health and provident insurance
  • Support for training and certifications

About Blooo

Blooo is a French cybersecurity firm certified ISO/IEC 27001:2022, organised in two practices, Cybersecurity Governance and Cybersecurity Architecture. Our method, Orient, Organise, Orchestrate, replaces declarations with proof: we reconnect governance and risk decisions with the technical reality of our clients, critical entities and organisations subject to NIS2 or DORA.