P

Pluxee

Global employee benefits and engagement platform

Application Security Manager

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeParis, FranceNo salary listed

About the Job

Requirements

  • A Bac +5 qualification in cybersecurity, computer science, or software development with a security specialization is required.
  • At least 5 years of experience in application security or DevSecOps, ideally in a hybrid cloud/on-premises environment.
  • Strong command of secure development principles, including OWASP Top 10, ASVS, Secure SDLC, and threat modeling.
  • In-depth knowledge of security tools integrated into CI/CD, including SAST, DAST, SCA, and secrets detection.
  • Proficiency with development and continuous integration environments such as GitLab CI, GitHub Actions, and Jenkins.
  • Understanding of modern architectures including APIs, microservices, containers, and public cloud platforms such as Azure and AWS.
  • Experience with application security standards and internal frameworks such as ISO 27034 and CIS Benchmarks.
  • Ability to explain security concepts clearly and facilitate meetings.
  • Ability to work in agile project cycles and product-oriented environments.
  • Experience steering or coordinating cross-functional security topics.
  • Ability to manage multiple projects simultaneously, prioritize work, and provide clear reporting.

Responsibilities

  • Participate in strategic discussions and product roadmap development to integrate security concerns early.
  • Adapt security requirements to Group and local product strategies.
  • Monitor IT project delivery and ensure security is integrated at every stage.
  • Conduct security-focused reviews of technical and application architectures.
  • Contribute to project risk analyses using EBIOS and ISO 27005.
  • Maintain and draft security recommendations, requirements, and frameworks for projects involving cloud, on-premises systems, APIs, and microservices.
  • Raise awareness of security issues among product, IT, and business stakeholders.
  • Integrate security requirements into the software development lifecycle.
  • Support product and development teams with threat modeling.
  • Define and implement automated security controls in CI/CD pipelines using tools such as GitLab, GitHub Actions, Azure DevOps, and Jenkins.
  • Configure and maintain SAST, DAST, SCA, and secrets detection tools.
  • Define acceptance thresholds, blocking rules, and false-positive management processes with developers.
  • Ensure application of internal standards such as OWASP ASVS and ISO 27034 and compliance with Group requirements.
  • Improve vulnerability management processes for application projects.
  • Help define detection, qualification, and remediation processes for vulnerabilities.
  • Work with Product Owners and development teams to plan and prioritize fixes in sprints.
  • Create and maintain application security dashboards for the IT department and project teams.
  • Assist with security investigations in applications during incident handling.
  • Write secure development guides adapted to internal languages and environments.
  • Produce internal frameworks such as coding guidelines and security checklists.
  • Run training sessions and hands-on workshops on secure coding, security code review, and DevSecOps practices.
  • Contribute to a strong security culture through awareness campaigns and internal challenges such as CTFs and bug bounties.
  • Monitor regulations including DORA, NIS2, and GDPR, as well as cybersecurity trends.
  • Participate in internal and external audits and in handling application security incidents.
  • Track technological developments and emerging threats, including SBOM, secure GitOps, and shift-left testing.
  • Propose, test, and promote tools and practices to improve the organization’s DevSecOps maturity.

Desired Qualifications

  • Experience in a hybrid cloud/on-premises environment.

About the Company

Pluxee

Global employee benefits and engagement platform

Pluxee is a global employee benefits and engagement partner offering a broad catalog of 250+ products across 28 countries, enabling employers to give staff access to perks ranging from restaurant meals to culture experiences and gift vouchers. Its platform combines decades of benefits experience with a modern digital approach to deliver personalised, flexible options for employees. The product works as an employer-facing benefits portfolio and admin platform: employers curate and administer benefit options, while employees access and redeem the chosen perks from the catalog via a unified interface. Pluxee differentiates itself through its large international footprint, extensive catalog, and the blend of 45+ years of experience with a nimble digital brand to provide customised, meaningful experiences. Its goal is to shape the future of employee benefits and engagement by helping people make the most of everyday moments and shared experiences.

Company size
5,001-10,000
Company stage
IPO
Headquarters
Issy-les-Moulineaux, France
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at Pluxee

See more jobs