
Product Cybersecurity Engineer
Pépite.
full-time
Posted on:
Location Type: Office
Location: Saint-Cyr-l'École • France
Visit company websiteExplore more
Salary
💰 €65,000 - €80,000 per year
About the role
- Perform risk analyses (STRIDE, LINDDUN, etc.)
- Review code (C, JavaScript / TypeScript)
- Conduct penetration tests on embedded Linux environments and Docker containers
- Automate security testing (SCA, SAST, DAST) within CI/CD pipelines
- Define security requirements from the specification phase
- Design and recommend secure architectures (kernel hardening, SELinux, AppArmor, seccomp)
- Train and support development teams on best practices (OWASP, DevSecOps)
- Lead certification and compliance efforts (IEC 62443-4-1 / 4-2, Common Criteria, CSPN, FIPS, etc.)
- Compile and prepare technical dossiers for certification bodies
- Deploy and maintain vulnerability management policies (ISO 30111, CVE, CVSS)
- Contribute to spreading cybersecurity culture and drafting internal guidelines
Requirements
- Engineering degree or equivalent in Computer Science, Cybersecurity or Embedded Systems
- Proven experience in product or systems cybersecurity
- One or more certifications are a plus: CEH, OSCP, CISSP or equivalent
- Linux security (kernel, secure boot, U-Boot / UEFI, TPM)
- Securing Docker / OCI containers and vulnerability management
- Reverse engineering and firmware analysis (Ghidra, Binwalk)
- Applied cryptography (TLS 1.3, PKI, HSM, secure element)
- Standards and frameworks: IEC 62443, ISO 27001 / 27034, OWASP ASVS, NIST
- Knowledge of regulatory requirements (NIS 2) and security audits
- Technical skills: secure programming in C (MISRA, CERT C) and TypeScript
- Implementation of CI/CD pipelines (GitLab, GitHub Actions) integrating SCA / SAST / DAST
- Knowledge of Kubernetes and Edge environments
- Proficient with collaboration tools (Microsoft 365)
- Excellent written communication skills in French and English
Benefits
- Attractive gross annual salary between €65,000 and €80,000, depending on experience
- High-impact cybersecurity and technological innovation projects
- Challenging and stimulating technical environment
- Role offering strong exposure to international security standards and certifications
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
risk analysiscode reviewpenetration testingsecurity testing automationsecure architecture designvulnerability managementreverse engineeringapplied cryptographysecure programmingCI/CD pipeline implementation
Soft skills
trainingsupportleadershipcommunication
Certifications
CEHOSCPCISSP