> Markdown version of [/jobs/ext/4007871-senior-corporate-security-engineer-it-security](https://www.wearedevelopers.com/jobs/ext/4007871-senior-corporate-security-engineer-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Corporate Security Engineer - IT Security

- **Company:** DOCTOLIB SAS
- **Location:** Paris, France
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Access Network, Artificial Intelligence, Computer Vision, Software as a Service, Cloud Computing, Cyber Security, Github, Intrusion Detection and Prevention, Mobile Application Software, Python (Programming Language), OAuth, Anti-Phishing, Zero Trust Network Access, Security Information and Event Management, TypeScript, Swift (Programming Language), AI Coding Agents, Agentic-AI, Kotlin, Kubernetes, React Native, Claude, Terraform
- **Published:** October 29, 2026
- **Apply:** https://www.welcometothejungle.com/en/companies/doctolib/jobs/senior-security-engineer-secops-x-f-m_paris

## About the Role

* Have 5+ years of hands-on experience securing corporate/enterprise environments - identity, endpoints, SaaS, and network - including at least 2 years at a senior level. You have built and enforced security controls in production (not only monitored alerts), and owned at least one significant program end-to-end, such as an MFA rollout, a device-compliance initiative, or a SaaS access-governance project.
 * Have strong daily mastery of GitHub, Terraform, and AI coding assistants (Claude or equivalent). You ship security work as reviewed pull requests and use AI agents as a structural part of your workflow, not an occasional helper.
 * Have deep identity & access expertise: identity providers, conditional access policies, OAuth/application governance, and modern authentication standards (passkeys, phishing-resistant MFA).
 * Have a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills - you can carry a proposal from draft to cross-team adoption.
 * Are fluent in English (working language in writing); daily team conversations happen mostly in French , so being a French speaker or willing to learn is a strong plus.

It would be fantastic if you:

 * Have detection engineering or SIEM experience (writing and tuning your own queries).
 * Are curious about platform security topics (cloud, Kubernetes, supply chain) and willing to contribute beyond your core perimeter.
 * Have prior experience in a regulated industry (healthcare, fintech, or public sector).

## Description

* Own corporate security programs from architecture to enforcement: conditional access, phishing-resistant authentication, device compliance, SaaS and third-party app governance (including AI tools), and zero-trust network access.
 * Ship every change as code: use Terraform and GitHub pull requests to bring controls to production designed, peer-reviewed, rolled out progressively (report-only * enforce), and always reversible.
 * Drive adoption across teams: write technical proposals, align IT and business stakeholders, plan communications and exception handling, and land security controls without disrupting how people work.
 * Evaluate and secure the tools Doctolibers adopt: conduct security reviews of SaaS integrations and AI tools, and deliver pragmatic, risk-based responses to shadow IT.
 * Investigate and improve : lead incident investigations on the corporate perimeter end-to-end, and continuously improve detection rules and response playbooks in our Elastic SIEM.
 * Mentor more junior engineers and contribute to a team culture of engineering excellence and peer review., * Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.
 * Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.
 * We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here ., * Technical Assessment (~90 min, live): security questions followed by a hands-on scenario worked through together - with an AI assistant available directly in the platform, the way we actually work
 * Behavioral Interview
 * At least one reference check