Job DescriptionNumberly is recognized as one of the world's leading specialists in Data Marketing, with nearly 500 employees and 8 offices worldwide, serving over 500 top-tier clients (L'Oréal, Arte, Groupe Seb, Moleskine, Pernod Ricard, SNCF, Aigle, HSBC...)By putting technology at the service of both brands and consumers, Numberly is at the heart of business growth and the drive for more responsible and relevant marketing. Numberly leverages the latest advances in data processing, analysis, and media activation in a virtuous context that combines business competitiveness with enhanced privacy and data protection.The security team is part of the Infrastructure & Security division. You will join a 4-person team working on GRC (Governance, Risk, Compliance) and Dev Sec Ops topics.Your role will involve securing both existing and new architectures and continuously improving technical security.Your missionsImplementing and maintaining the operational conditions of IT security solutionsContributing to the drafting and enforcement of IT security policies and guidelinesSupporting security audits and penetration testingRaising awareness on security best practices among employeesKeeping up with the latest in cybersecurity technologiesIntegrating security into the software development lifecycle in collaboration with other teamsDeploying and maintaining threat detection and response solutions (SIEM)Analyzing vulnerabilities and managing/tracking security updates for systems and applications with relevant teamsManaging security incidents and developing/updating incident response plansDesigning and implementing data protection solutions with business teamsTraining and supporting development and operations teams on security best practicesAutomating security processes and vulnerability managementDesigning and implementing identity and access management (IAM) solutionsQualificationsCybersecurity:Knowledge of security principles and best practicesDev Ops & SRE:Experience with Docker, Kubernetes, AnsibleScripting & Automation:Ability to script in Python or Bash to automate security and reliability tasksSecurity & Performance Testing:Experience with SAST/DAST tools and performance monitoringCI/CD & Incident Management:Ability to integrate security into CI/CD pipelines and proactively manage incidentsTeam Collaboration:Ability to work with development, operations, and SRE teams to integrate security and improve system reliabilityOur stack includesCloud:AWS, AzureAutomation:Ansible, TerraformCI/CD:Git Lab, Argo CDVirtualization:ProxmoxContainers:Kubernetes (on-premises, AWS EKS, Azure AKS)Load-balancing:HAProxy, Open Resty (nginx), EnvoyMonitoring:Prometheus, Thanos, Kafka, Elasticsearch, GraylogTracing:SentryLanguages:Python, GoOS:Ubuntu / DebianAPIs:Graph QL, RESTSecurity tools and frameworks:MDM:Intune, Kandji, LandscapeLogs:Kafka, GraylogIDS/IPS:FalcoEDR:Harfang Lab, Microsoft Defender for EndpointScanning:Ivre, Burp SuiteSAST:Git Lab SAST, Semgrep, etc.KMS/PKI:Hashi Corp VaultContainers:Kyverno, HarborExample projects for 2025Enhancing alerting capabilities of our SIEM and integrating Crowd SecIntegrating an open-source WAFScanning Docker images for vulnerabilitiesIntegrating a managed external SOCCheck out some of our security-focused open-source projectsvault-db-injector:our Kubernetes Admission Webhook for ephemeral credentials management within Kubernetes, enabling native isolation and credential rotationpython-vaultwarden:our library for automating Vaultwarden integration for 500+ employeesAdditional informationAt Numberly, we share a passion for transmission: weekly internal talks, meetings with expert professionals in their field, continuous learning.Fast and powerful onboarding, in particular thanks to: the mentor assigned to each newcomer; to Live my life in different teams; Happy Meetings: monthly internal meetings to meet up with all our teams around the world and share group news.We cultivate freedom of speech which allows everyone to participate in the development of the group.We act positively on our ecosystem through 1000mercis impacts and via our activities which create value in the Open Internet and contribute to the enrichment of Open Source.Numberly is an actor of diversity with a gender equity score of 97/100.Numberly is ISO/IEC 27001:2023 certified; this certification recognizes compliance with the highest standards in information security.Numberly is an international environment with more than 30 nationalities in our teams.Offices in the image of each of the teams, a generous library, a large fully equipped music studio, two cats, selective sorting and vermicomposting, the possibility of bringing your pet and space for bicycles! In each kitchen: coffee, tea, unlimited infusions and also mystery lunches, Wellpass (ex-Gymlib) partnership, sports classes and parties (often in disguise).Possibility of hybrid remote work schedule.Swile card (meal vouchers).Possible mobility in our various offices abroad.Numberly welcomes people with disabilities.