Senior DevSecOps Engineer

• Make 360Learning's infrastructure secure by design, detectable by default, and provable at audit time
• Bridge security and platform engineering by addressing infrastructure security issues and supporting security operations
• Map the Azure and AKS environment, detection and logging coverage, and ISO 27001 and SOC 2 control scope
• Handle infrastructure-related alerts end to end
• Ship hardening and automation improvements in production
• Own infrastructure vulnerability management from triage through remediation follow-up
• Deploy and operate a honeypot producing high-fidelity alerts
• Expand SIEM connector coverage and document log sources and retention
• Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting
• Manage detection content as code with reviewed and tested rules and documented runbooks
• Automate audit evidence for infrastructure scope
• Eliminate long-lived credentials on critical paths and enable secure defaults
• Collaborate daily with the CISO, Security Engineer, DevOps, platform engineering, and IT teams
• Participate in alert triage and customer security assessments
• Own approximately half of the role's greenfield build work end to end

• 5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands-on infrastructure practice
• Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security
• Solid cloud experience, ideally Azure; strong AWS or Google Cloud experience with a genuine interest in converting works too
• Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines
• Scripting and automation: Python or Go, plus shell
• Comfortable reading and writing code, and opening pull requests on repositories owned by other teams
• Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources
• Fluent English (US/UK) / B2 level or equivalent (FR)
• Enthusiasm for the Convexity working environment
• ISO 27001:2022 and SOC 2 Type II security and compliance context

• Package includes base salary, a variable component and equity
• Work From Home stipend
• RTT
• Lunch vouchers
• Medical insurance
• Gym subscription
• 1 month parental leave for the second parent
• Flexible hours
• Full remote work possible anywhere in France
• 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity
• Corporate Social Responsibility initiatives and CSR Charter
• Convexity culture and impact-oriented working framework