> Markdown version of [/jobs/ext/3218401-platform-security-engineer](https://www.wearedevelopers.com/jobs/ext/3218401-platform-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Security Engineer - **Company:** DOCTOLIB SAS - **Location:** Levallois-Perret, France - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Amazon Web Services, Computer Vision, Microsoft Azure, Cloud Computing, Code Review, Cyber Security, Continuous Integration, Software Debugging, Linux, Github, Identity and Access Management, Intrusion Detection and Prevention, Mobile Application Software, Python (Programming Language), Key Management, Reliability Engineering, Security Information and Event Management, TypeScript, Scripting, Multi-Cloud, Swift (Programming Language), Kotlin, Kubernetes, Cybercrime, Free and Open-Source Software, React Native, Terraform, Splunk - **Published:** September 9, 2026 - **Apply:** https://startup.jobs/platform-security-engineer-x-f-m-doctolib-2-9987026 ## About the Role * Have 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure or platform engineering, including some exposure to a cloud environment (AWS, GCP or Azure) in production - an internship or apprenticeship in one of those roles counts. * Work daily with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests, and you are comfortable operating and debugging workloads on Kubernetes. * Use AI coding assistants (Claude or equivalent) as a normal part of how you work. * Have carried at least one project through to production - security or not - and stayed with it past the first deployment until it was actually adopted. * Have solid fundamentals: Linux, networking, cloud, Kubernetes and development/scripting, a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills - you can carry a proposal from draft to cross-team adoption. * Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus. It would be fantastic if you: * Have worked with a SIEM (Elastic, Splunk, or equivalent), writing and tuning your own queries. * Have done detection engineering, incident response, threat hunting, or CTFs. * Can point to public write-ups, open-source contributions, or a home lab. * Have prior experience in a regulated industry (healthcare, fintech, or public sector). ## Description Your mission will be to protect sensitive healthcare data while enabling rapid, secure innovation. You will be responsible for securing Doctolib's cloud infrastructure and application ecosystem, combining multi-cloud security expertise with hands-on platform engineering - contributing directly to the safety of millions of patients and care teams who rely on our platform every day. Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients. What you'll do Your responsibilities include but are not limited to: * Own a platform security workstream end to end, from architecture to enforcement: scope it with your tech lead, design the control, roll it out progressively (report-only, then enforce), handle exceptions, and see it through to full coverage. Typical examples: hardening IAM across our AWS accounts, tightening cluster admission policies, or closing a class of misconfiguration for good. * Ship every change as code: Terraform and GitHub pull requests, peer-reviewed and always reversible. No console clicking, no undocumented state. * Harden our cloud and infrastructure baseline and keep it hardened: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls - building the guardrails and driving remediation of what they surface with platform and engineering teams, turning recurring findings into automation rather than tickets. * Investigate and improve: lead incident investigations on the platform perimeter end to end, and continuously improve detection rules and response playbooks in our Elastic SIEM. * Work in the open: write clear technical notes, drive adoption of your changes with the engineering teams they affect, and grow through code review and pairing with the rest of the team., * Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements. * Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native. * We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Kotlin Multiplatform - True power of native code reuse](https://www.wearedevelopers.com/videos/4-kotlin-multiplatform-true-power-of-native-code-reuse) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)