FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in securing cloud infrastructure and production systems, implementing centralized identity management, and conducting security audits. Proficient in leading security incidents and fostering a culture of security awareness across teams.
Highest-signal resume keywords
AWS Cloud SecurityPenetration TestingISO 27001 ComplianceSecurity Incident ManagementAutomation with Python
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Identity ManagementMulti-Factor AuthenticationVulnerability ExploitationSecurity AuditsSecurity Code ReviewsPrinciple of Least PrivilegeWeb Application SecurityAPI SecuritySecurity Incident ResponseFraud Prevention
Soft Skills
Team CollaborationRisk PrioritizationSecurity Awareness Training
Tools & Technologies
AWS IAMCloudTrailGuardDutySAMLOIDCSCIMCDNWAFPassword ManagerMDM
Certifications & Qualifications
OSCPOSWEAWS Security SpecialtyCISSP
Industry Keywords
SOC 2PCI DSSZero-Trust SecurityCredential StuffingDDoS AttacksSecurity ReviewsPhishing ExercisesTemporary Privilege ElevationAuditable Privilege ManagementFraud and Abuse in B2C
Tech Stack
Tools & technologiesAWSCloudDNSPythonGo
About the role
Key responsibilities & impact- Secure access, cloud infrastructure, production systems, and workstations
- Build centralized identity management with SSO, SCIM, and strong MFA
- Apply the principle of least privilege and manage temporary, auditable privilege elevations
- Secure employee onboarding, team changes, and offboarding, including for contractors
- Administer the password manager and service accounts
- Secure multi-account AWS environments, deployment platforms, CDNs, and WAFs
- Replace static secrets with ephemeral identities and automate their rotation
- Harden configurations and conduct security reviews of new architectures
- Manage fleet security with MDM, encryption, and updates
- Deploy a zero-trust approach for critical tools
- Centralize security logs and build useful alerts
- Lead security incidents from detection through post-mortem
- Counter credential stuffing, account takeover, card testing, mass account creation, scraping, and DDoS attacks
- Conduct internal penetration tests and security code reviews
- Lead external penetration tests and potentially a bug bounty program
- Raise team awareness through training, guides, and phishing exercises
- Support squads in writing secure code
- Subsequently conduct security audits across departments
- Contribute over time to ISO 27001, SOC 2, and PCI DSS initiatives
- Work directly with the CTO, partnering with the DevOps engineer, supporting approximately 25 developers organized into squads
- Collaborate with the Tech, Risk & Payments teams and department heads
Requirements
What you’ll need- Experience independently owning the security function for a company or a broad scope
- Proven experience leading real security incidents end to end
- Ability to prioritize based on actual risk
- Ideally, experience in a company or team that has implemented a compliance program
- Experience with ISO 27001, SOC 2, or PCI DSS audits is a plus
- Experience with fraud and abuse affecting B2C products that process payments is a strong plus
- Strong command of AWS cloud security and its native tooling: IAM, Organizations, SCPs, CloudTrail, and GuardDuty
- Proficiency in web and API penetration testing, the OWASP Top 10, and vulnerability exploitation
- Proficiency with penetration-testing tools, ideally enhanced with AI
- Strong automation mindset and experience with Python, scripting, and Go
- Knowledge of SAML, OIDC, SCIM, MFA, and the principle of least privilege
- Knowledge of CDN/WAF, DNS, deployment platform, and secrets-management security
- OSCP, OSWE, AWS Security Specialty, CISSP, or equivalent certifications are a differentiator
- Fluent French required
- English proficiency at a minimum B2 level required and assessed during the recruitment process
- Availability to work within the CET ±4-hour time zone range
Benefits
Comp & perks- €200 monthly coworking budget
- Flexible paid time off
- Flexible working hours
- Option to work remotely from a different time zone for one month
- Equipment budget for a laptop, desk, chair, monitor, and headset
- Two company offsites per year
- Professional development opportunities
- Culture of innovation
- Career growth opportunities in a fast-growing company
- Inclusive work environment
- Dedicated tooling budget
- Access to leading cloud models and security-focused open-source models
- Remote work from anywhere in Europe
- A culture built on trust, flexibility, and respect for individual working rhythms