Platform Security Engineer

About the role

Scality is seeking a Platform Security Engineer to join their platform and delivery team in Paris. This role focuses on hardening the company's Linux-based software-defined storage platform, automating vulnerability management, and ensuring supply chain security. You will act as an embedded security peer within the development team, writing code to solve security challenges rather than just managing policies.

Responsibilities

• Develop and maintain Python and Bash scripts to harden the OS and automate vulnerability management.
• Implement continuous CVE detection across repositories, container images, and RPMs.
• Drive platform-level hardening for the SCOS Linux distribution, including SELinux enforcement.
• Manage supply-chain integrity through artifact provenance, signing, and dependency tracking.
• Collaborate with the team to integrate security assessments into CI/CD pipelines and SBOM tooling.
• Contribute to threat modeling and security reviews of platform design changes.

Required skills

• Linux
• Python
• Bash
• Git
• Security engineering
• French
• English

Nice to have

• CVE triage
• CVSS scoring
• SBOM
• Trivy
• Grype
• Syft
• RPM packaging
• SELinux
• GitHub Actions
• RHEL

Qualifications

• 2-4 years of relevant experience
• Demonstrable interest in security through practical projects or contributions

About the Company

Scality is a leader in software-defined object storage, trusted by over 1,000 enterprises and 700 million users worldwide. The company is recognized as a Gartner Magic Quadrant Leader and provides solutions for banking, healthcare, and government sectors.