Scality
Visit websitePlatform Security Engineer
Salary not disclosed2–4 yearsOnsite
- Engineering
- Paris
- Full time
- Today
About the role
Scality is seeking a Platform Security Engineer to join their platform and delivery team in Paris. This role provides dedicated capacity to harden the company's Linux-based software-defined storage infrastructure, automate vulnerability management, and ensure supply chain security. You will work directly within the development team to integrate security into the build and release process.
Responsibilities
- Automate vulnerability management and CVE detection across repositories, container images, and RPMs.
- Develop and maintain Python and Bash scripts to harden the OS and automate security tasks.
- Implement supply-chain security measures including artifact provenance, signing, and dependency management.
- Advance SELinux enforcement across the platform and manage secrets and credentials.
- Collaborate with the team to ensure FIPS 140-3 readiness and compliance with regulations like NIS2 and the EU Cyber Resilience Act.
- Perform threat modeling and provide security reviews for significant design changes.
Required skills
- Linux
- Python
- Bash
- Git
- Security engineering
- French
- English
Nice to have
- CVE triage
- CVSS scoring
- SBOM
- Trivy
- Grype
- Syft
- RPM packaging
- SELinux
- GitHub Actions
- RHEL
Qualifications
- 2-4 years of relevant experience
- Equivalent practical experience with strong evidence of skills
About the Company
Scality is a leader in software-defined object storage, trusted by over 1,000 enterprises and 700 million users worldwide. The company is recognized as a Gartner Magic Quadrant Leader and provides solutions for banking, healthcare, and government sectors.