Ingénieur Sécurité Opérationnelle & DevSecOps - île-de-France

Further Details

An exciting opportunity for an experienced Operational Security Engineer with expertise in Vulnerabilities and DevSecOps, based in the île-de-France region of France. JR France is representing a prominent international industrial group within the energy sector that is currently undertaking a significant IT transformation. This role is pivotal in overseeing the management of system vulnerabilities and ensuring robust control over third-party risks. The successful candidate will serve as a key technical and methodological point person, responsible for the upkeep of application security testing tools (SAST/DAST) and third-party risk management platforms. Key responsibilities include deploying and supervising automated vulnerability scans across the server infrastructure, defining and driving a risk-based remediation schedule, and ensuring compliance with established security standards. Furthermore, the role involves administering security analysis solutions within CI/CD pipelines and defining test coverage thresholds for critical applications. The position also entails designing and formalizing a standardized framework for assessing third-party security, managing remediation plans for high-risk vendors, and implementing ongoing monitoring of crucial partner security postures. This position is ideal for a candidate with a strong background in cybersecurity operations and a desire to work in a dynamic, internationally-focused environment. A minimum of 5 years of relevant experience and a Master's degree (Bac +5) are required, along with professional English proficiency. The role emphasizes continuous improvement, Lean methodologies, and cross-functional collaboration to enhance overall cybersecurity effectiveness.

Operational Security Engineer - Vulnerabilities & DevSecOps in Île-de-France

JR France is actively recruiting for a vital "Ingénieur Sécurité Opérationnelle" role, focusing on Vulnerabilities and DevSecOps. This position is within a leading international energy group experiencing dynamic IT evolution, offering a fantastic opportunity for cybersecurity professionals in the île-de-france region of France. The core of this role involves managing system vulnerabilities and rigorously assessing third-party risks, acting as a central technical and methodological point of contact. Key responsibilities include enhancing server security through automated vulnerability scans and effective patch management, ensuring adherence to stringent security standards. You will also play a critical part in embedding security into the development lifecycle by administering SAST/DAST tools within CI/CD pipelines, aiming for seamless integration and enhanced application security before production. This role emphasizes collaboration and continuous enhancement of cybersecurity processes. The company seeks an individual with strong analytical acumen and a commitment to operational excellence. This is an ideal career step for those looking to leverage their expertise in a challenging and rewarding international environment. For those seeking "career opportunities in France" or "IT security jobs," this position offers significant professional development. **Key Requirements:**

• Bac +5 education level
• Minimum 5 years of experience in a similar security role
• Expertise in vulnerability management and patch management
• Proficiency in SAST/DAST and CI/CD integration
• Experience with third-party risk management
• Professional English language skills

**Job Highlights:**

• Full-time position
• Location: Île-de-France, France
• Competitive salary and benefits package (inferred)
• Opportunity for professional growth in a global energy leader

Skills

• Solid expertise in infrastructure scanning tools
• Proficiency in patch management strategies
• Mastery of SAST/DAST tools and CI/CD integration
• Strong understanding of third-party risk assessment frameworks
• Knowledge of continuous improvement and Lean methodologies
• Excellent analytical skills
• Rigor in KPI tracking
• Strong pedagogical skills
• Ability to foster collaboration across transversal teams (DevOps, IT Ops, Purchasing)
• Professional English proficiency

Duties and Responsibilities:

• Deploy and supervise vulnerability scan automation on the entire server fleet
• Define and pilot a risk-based remediation calendar, prioritizing critical and high vulnerabilities
• Achieve and maintain server compliance rates according to established security standards
• Administer application security analysis solutions within CI/CD pipelines
• Define and enforce test coverage thresholds on critical applications before production deployment
• Design and formalize a standardized framework for third-party security assessment
• Pilot remediation plans for high-risk suppliers
• Implement continuous monitoring of key partner security posture
• Apply a Lean approach and continuous improvement to cybersecurity processes
• Identify and address root causes of operational blockages
• Produce impact reports, remediation schedules, and partner security evaluations

How to apply

This is a crucial role for an "Ingénieur Sécurité Opérationnelle" focusing on vulnerabilities and DevSecOps within a major international industrial group. Interested candidates are encouraged to submit their applications promptly via the provided link. 💼 **Preparation:**

• Ensure your Curriculum Vitae (CV) is up-to-date and highlights your experience in vulnerability management, DevSecOps, SAST/DAST, and third-party risk assessment.
• Gather any relevant certifications or proof of training in cybersecurity tools and methodologies.
• Prepare to discuss your experience in implementing security within CI/CD pipelines and your understanding of Lean principles.

👉 **Application Process:**

• Click on the "Apply Now" link provided below to access the application portal.
• Complete the online application form accurately and thoroughly.
• You may be required to upload your CV and a cover letter detailing your suitability for the role.

⏳ **Deadline:**

• The closing date for applications is December 28, 2026. Please ensure your application is submitted well before this date to avoid any last-minute issues.

🌐 **Important Information:**

• This position requires professional English proficiency, as it involves working within an international context.
• Candidates with a Bac +5 degree and a minimum of 5 years of relevant experience are strongly encouraged to apply.

📌 **Contact & More Details:**

• For further information or to initiate your application, please use the designated application link.