Cybersecurity and AI Engineer

The Team You'll Join

You'll be part of our Security team within the Platform, Data & AI Security pillar, led by Maxime Lahaye, Senior Security Officer, based in Paris.

AI is fundamentally transforming how we work, and you'll join a team at the forefront of this evolution. This is your opportunity to build the GRC infrastructure of tomorrow, where automation, scripting, and security converge to enable Mirakl's next phase of growth.

This is a permanent position (CDI) based in Paris or Bordeaux, with 4 days on-site per week.

Your Impact

1 · Compliance & Certifications — Automation-first

• Contribute to maintaining Mirakl's ISO 27001, ISO 27018 and SOC 2 certifications, leveraging automated GRC platforms to enable continuous compliance monitoring
• Automate evidence collection, control monitoring and documentation workflows using modern GRC tooling, AI-powered agents and scripting (Python, N8N)
• Help manage and evolve the ISMS (Information Security Management System), ensuring it reflects both regulatory requirements and Mirakl's evolving AI-driven operations

2 · AI Governance 

• Co-design and evolve Mirakl's AI usage governance framework: acceptable use policies, data classification for AI inputs, shadow AI detection and AI vendor risk assessment
• Maintain a live inventory of AI tools used across the company and contribute to the risk-based process for evaluating and onboarding new tools
• Monitor the AI governance regulatory landscape and help adapt Mirakl's framework proactively

3 · Security by design across all company projects

• Partner with Product and Engineering teams early in project lifecycles to embed security and compliance requirements from the start
• Participate in risk reviews across product and platform initiatives, with specific attention to AI-related threat vectors (prompt injection, data leakage in LLMs, access control for models)

What You'll Bring to the Role

Experience:

• Master's degree (Bac+5)
• Minimum 3 years of experience in cybersecurity
• You participated in ISO 27001 audit as a security contributor at least
• Proven experience in scripting and automation (Python, N8N or equivalent)
• Experience in a consulting firm or technology company is a plus
• Strong understanding of compliance frameworks and security standards

Skills:

• Strong technical profile with hands-on experience developing scripts and automating processes
• Proactive and autonomous, with strong organizational and problem-solving abilities
• Excellent communication skills to engage both technical and non-technical stakeholders
• Integrity and ethics as core values
• Ability to work collaboratively in cross-functional teams
• Experience with web application and cloud (SaaS) security is a plus

Tools Used

• Python
• N8N
• Drata
• AWS, GCP
• Office Suite / Google Workspace

Languages

• Fluent in French and conversational English

Our Hiring Process

1. 30-40 minute call with a Talent Acquisition Specialist
2. 1-hour technical interview with the hiring manager
3. Two 45-minute values interviews using the STAR methodology

The STAR method and structured interviews will hold no secrets for you.