360Learning
From 360Learning's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time.
Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time. 360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II. Over the past two years the technical security workload has grown on every front: a larger and more regulated customer base sending their own scans and security assessments, a wider detection and response scope, more infrastructure to keep hardened and auditable, and a growing backlog of security engineering projects that never reach the top of the queue. We are creating this position to add real technical capacity on the infrastructure side of security, and to move part of our security posture from manual effort to automated guardrails. You will be the bridge between security and platform engineering: deep enough in infrastructure to fix things yourself, and close enough to security operations to know what to look for. “Ours is a small, senior team with a broad scope: information security, compliance, infrastructure governance and internal tooling, with dual audit accountability on ISO 27001:2022 and SOC 2 Type II. That means direct impact and no layers between you and the decision. Roughly half of this role is greenfield build work you will own end to end.” Guillaume Seigneuret, CISO and Hiring Coach.
Complete our onboarding and learn how we work through our own platform and our Convexity culture
Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer
Meet the DevOps, platform engineering and IT teams you will work with daily
Have shipped at least one concrete hardening or automation improvement in production
Have measurably widened SIEM connector coverage, with documented log sources and retention
Have largely automated audit evidence on the infrastructure scope
Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security
Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too
Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines
Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams
Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources
Fluent English (US/UK) / B2 level or equivalent (FR).
Benefits/Perks: Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent.
Balance: Flexible hours, full remote work possible anywhere in France 🏠
Diversity, Equity, and Inclusion: We have 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity. Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🤝
Corporate Social Responsibility: Review our CSR Charter: 360learning.com/blog/corporate-social-responsibility-charter 🌎🌏🌍
Discovery Meeting with our Head of Security
Live exercise with our Head of Security and our Head of Devops: investigation of an incident scenario, or review of an insecure infrastructure configuration
Clarification Meeting with the Security Engineer and a DevOps engineer
Culture Fit Meeting with our VP of Engineering
Offer!
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in