Back to results

Platform Security Engineer

Salary not disclosed2–4 yearsOnsite

  • Engineering
  • Paris
  • Full time
  • Today
Newly posted

About the role

Scality is seeking a Platform Security Engineer to join their platform and delivery team in Paris. This role provides dedicated capacity to harden the company's Linux-based software-defined storage infrastructure, automate vulnerability management, and ensure supply chain security. You will work directly within the development team to integrate security into the build and release process.

Responsibilities

  • Automate vulnerability management and CVE detection across repositories, container images, and RPMs.
  • Develop and maintain Python and Bash scripts to harden the OS and automate security tasks.
  • Implement supply-chain security measures including artifact provenance, signing, and dependency management.
  • Advance SELinux enforcement across the platform and manage secrets and credentials.
  • Collaborate with the team to ensure FIPS 140-3 readiness and compliance with regulations like NIS2 and the EU Cyber Resilience Act.
  • Perform threat modeling and provide security reviews for significant design changes.

Required skills

  • Linux
  • Python
  • Bash
  • Git
  • Security engineering
  • French
  • English

Nice to have

  • CVE triage
  • CVSS scoring
  • SBOM
  • Trivy
  • Grype
  • Syft
  • RPM packaging
  • SELinux
  • GitHub Actions
  • RHEL

Qualifications

  • 2-4 years of relevant experience
  • Equivalent practical experience with strong evidence of skills

About the Company

Scality is a leader in software-defined object storage, trusted by over 1,000 enterprises and 700 million users worldwide. The company is recognized as a Gartner Magic Quadrant Leader and provides solutions for banking, healthcare, and government sectors.