Security Platform Engineer
Remote France
French & English
About us
Airnity is a rapidly growing French company in the telecommunications field. We are a mobile operator serving automotive manufacturers and helping them meet the challenge of ultra-connected vehicles.
One of our strengths as a telecom operator is that we heavily use "cloud-native" technologies. This allows us to have an extremely agile approach to our business and position ourselves as a viable alternative to traditional players.
We need help
We know finding a security expert who spans cloud, software, and networking is a challenge – don't try to check all the boxes 😅
Within the Engineering team, you will be the foundational expert for our security program. You will define and implement the practices and tools that protect our platform, our product, and our company, ensuring security is an enabler for our innovation, not a blocker.
About Security in a Cloud-Native Telecom World (No telecom experience required!)
Securing a modern telecom operator isn't about building traditional firewalls. It’s about protecting highly distributed, low-latency software that forms the backbone of a mobile core network.
Think of it as embedding security into high-performance microservices that are constantly changing and scaling, all while meeting strict industry regulations.
Key technical challenges you'll tackle
-
Automation: Build a "paved road" for developers, automating security checks and guardrails directly into our CI/CD pipelines.
-
Scale & Ephemerality: Secure a dynamic environment running on Kubernetes where infrastructure is temporary and defined as code.
-
Resilience: Protect critical network functions against threats while maintaining zero-downtime.
-
Compliance as Code: Achieve and maintain certifications like ISO 27001 by translating security requirements into automated, auditable controls.
Airnity is also building a foundation of trust with our automotive partners. In this context, you will work with a multidisciplinary team to build a world-class security program:
-
Development of our incident detection and response capabilities.
-
Securing our hybrid cloud environment (GCP and Equinix).
-
Protecting our corporate environment and employee access.
Security & Development environment
-
GCP / Equinix
-
GitHub / GitHub Actions
-
Docker / Kubernetes / Argo CD / Crossplane
-
Security Tooling (CNAPP: Wiz, XDR/SIEM: Wazuh, IDP: Entra/Keycloak) → To be developed
Your mission will cover the entire lifecycle of our security program
-
Design and architecture of security systems and controls.
-
Implementation of security tooling and automation.
-
Partnering with engineering teams to embed secure practices (DevSecOps).
-
Development of our incident response and operational capabilities.
-
Management of risk and supporting governance activities.
We value strong security engineering fundamentals and a pragmatic mindset, and we will provide domain-specific training in telecommunications.
Our environment
As Airnity is organized as a Holacracy, you will have complete freedom to propose the role or roles you wish to take on in order to best benefit the team with your experience. You can also develop new skills by choosing other roles.
Airnity is a full-remote company, allowing you to work from anywhere in France. If you are located in the Toulouse or Nice region, there is also the possibility of occasional co-working.
And you?
-
You have roughly 7+ years of hands-on experience in Cloud Security, Application Security, or Platform Security.
-
Ultimately, we value your proven track record of building an end-to-end security program in a cloud-native environment more than a specific number of years.
-
-
You are autonomous and pragmatic, comfortable covering all activities necessary to build a security program (architecture, tooling, operations, compliance).
-
You have a builder's mindset and are excited by the opportunity to make a foundational impact.
Nice to have (not mandatory):
-
Deep knowledge of public cloud (GCP) and Kubernetes security.
-
Experience implementing and managing security tools (e.g., Wiz, Orca, SIEM platforms).
-
Scripting/coding experience for automation (e.g., Go, Python).
-
Telecom expertise or experience in a highly regulated industry.
-
Familiarity with compliance frameworks like ISO 27001.