Cloud Security Engineer

Get to know us
Do you want to help us shape what the future of work will look like and how it will best embrace our life's aspirations? If this sounds like a journey you want to embark on, we may have the right role for you! PayFit is an intuitive cloud-based payroll and employee management solution designed specifically for SMBs. Since 2015, we have set ourselves a mission to simplify payroll for SMBs and enable employers and employees to grow together. We are a European company operating from 3 main countries (France, Spain, and the UK) where we are supporting over 16,000 clients.
Creating a fulfilling work environment and culture is also a core mission at PayFit, and our day-to-day work philosophy is reflected in our four values:

Care:
We genuinely care for others whoever they are, whatever they think.
Excellence:
We aim to improve and achieve better results every day.
Humility:
Staying humble and exchanging transparent feedback helps us to grow and improve.
Passion:
We are the architects of PayFit's success.
A key part of our culture , and essential for our success, is also improving the diversity of our teams and building an inclusive culture where you can be yourself at work.
This is why our recruitment focuses on the skills you demonstrate, and not only on your academic background or previous professional experiences. At PayFit we understand that you can gain applicable skills through a variety of life experiences and we are interested in knowing them, too.
Location:
You can work at this position from any location in France or Spain .
Position Overview:

As a Senior Security Engineer at PayFit, you will play a key role in designing, implementing, and managing security measures to protect our SaaS platform, infrastructure, and customer data. You work collaboratively with cross-functional teams to define our security strategy, identify & solve vulnerabilities, respond to security incidents, and increase our team knowledge and awareness of security best practices.
Your mission:

Enhance Security:
Plan and implement strategies to strengthen Payfit's security by collaborating closely with our infrastructure teams. You'll have the trust and autonomy to make impactful decisions.
Manage Security Responsibilities:
Manage & maintain security tools and technologies, and oversee key security tasks in designing automated tests, architecting systems, and delivering important components within our AWS Cloud infrastructure.
Share Your Knowledge:
Lead training sessions, give presentations, and promote effective technical and engineering practices across the team to integrate security best practices into the software development lifecycle (e.g., secure coding, threat modeling, code reviews).
Handle Security Incidents:
Investigate any security events, risks or breaches, triage HackerOne reports, develop plans to address them, and coordinate our response to incidents.
Conduct Security Assessments:
Perform vulnerability assessments and carry out security testing to identify and fix potential issues.
Develop Security Automation:
Create tools and scripts to automate security processes in our cloud environments.
Collaborate with Teams:
Work closely with infrastructure and product teams to ensure our cloud systems are secure by default, maintaining a safe and reliable environment for our services.
A Brief Overview Of Our Day-to-day Stack:

Project management and knowledge:
JIRA, Notion
Communication:
Slack, Gather, Meet
The role is for you if:

You have at least 5+ years of experience in Security , with at least 2 years involving AWS Public Cloud.
You work well cross-functionally, and can communicate with audiences who may not have a security background.
You understand the secure development process and other best practices.
You have experience in identifying, debugging and solving complex security-related production issues.
You are used to working in Agile teams and look for and implement continuous improvement, but you also appreciate good process and quality assurance in mitigating risk and improving quality and security.
And overall, you are curious and remain updated on emerging security threats, vulnerabilities, and technologies.
It would be great if you also:

Have experience working with remote teams.
Have at least 1 year of Kubernetes experience, especially in large or complex environments.
Have experience in cloud automation tools such as Terraform, CloudFormation, etc.
Your future team:

You'll become part of a driven security team, working alongside 2 other Security Engineers. Together, you'll collaborate closely with infrastructure and product teams to maintain a secure and dependable environment for PayFit's services.
What we offer:

Flexibility:
We believe it is key to produce your best work and to be fulfilled. We therefore offer the possibility to work away from our main offices, within France/UK/Spain; as well as abroad for a defined period. Further requirements may apply depending on the role and your overall experience.
Learning & Development:
In PayFit we have a great learning platform where you can learn new skills every day with the support of our company. We also have English language courses to improve your business communication vocabulary and get to the next level.
Career Development:
We want you to progress and be free to choose which direction you want to grow. There are also opportunities for internal moves.
Health promotion:
A Gym at our Paris office and a GymLib subscription with preferential rates. 4 paid sessions with a mental health practitioner and online support with Moka.Care.
Health insurance:
Mutuelle Henner (60% covered by PayFit).
Transportation:
50% covered for your public transportation card for those living within Ile de France. A budget to travel to the office for those who live outside of it.
Meals:
A restaurant card with our partner Swile (9€ per workday).
Home office budget:
150€ per year to help you get set up in the best conditions. A MacBook is our standard working tool.
Parental support:
20 weeks maternity leave covered by PayFit and 4 weeks leave for the second parent.
Time off:
25 days of holidays + RTT days (depending on the contract).
Disability Inclusion:
All of our positions are open to any person living with a disability. To guarantee equal treatment and opportunities, we will take, based on individual needs, appropriate measures to adapt the work conditions of PayFiters with disabilities, and if needed also during the recruitment process. Please let us know what you need and we will do our best to accommodate!
•