We're looking for a senior application security analyst to strengthen security throughout the software lifecycle, with a technical focus on vulnerability analysis and DevSecOps/CI/CD integration.
What you'll do
- Embed automated security checks in CI/CD pipelines and define risk-based quality gates.
- Review scan results, assess coverage and identify actionable application vulnerabilities.
- Assess exploitability, impact and false positives, then prioritise remediation.
- Coordinate code reviews and penetration tests, then verify fixes or accepted findings.
- Advise developers on practical corrections and compensating measures.
- Document findings, track residual risks and remediation, and produce reusable technical guidance.
What you bring
- Senior-level experience in application security analysis and risk-based assessments.
- Hands-on experience configuring SAST, DAST, SCA, secret detection and vulnerability-scanning tools.
- Strong understanding of application security architecture, including data flows, authentication, authorisation, encryption, APIs and software dependencies.
- Experience securing application code, APIs, dependencies, containers and secrets.
- Knowledge of OWASP Top 10, ASVS, SAMM, CWE, CVSS and NIST SSDF.
- Ability to understand application context and apply proportionate controls.
- Clear technical reporting and documentation, with the ability to guide developers towards practical remediation.
- Ability to configure controls independently and collaborate with development and DevSecOps teams.
- French at B2 level.
What's next?
The people who do well here are the ones who saw themselves in this description. Not because they match every line, but because the mission felt right for them.
We are actively hiring for this position. Applications are reviewed by our team, and matching profiles receive a call to discuss the role in detail.
It takes under a minute to apply. Your email, your CV. That is all we need to start the conversation.