Application Security Engineer - Cybersecurity - Toulouse

About Sopra Steria​

Sopra Steria, a major player in Tech in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, digital services, and solutions. It helps its clients lead their digital transformation and achieve tangible, sustainable benefits. The Group offers a comprehensive response to the competitiveness challenges of large companies and organizations, by combining in-depth knowledge of business sectors and technologies with a collaborative approach. Sopra Steria places people at the heart of its actions and is committed to working with its clients to make the best use of digital technology to build a positive future. In 2025, the Group achieved a turnover of 5.6 billion euros.

The world is how we shape it*​

Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN Code: FR0000050809​

For more information, find us at www.soprasteria.com/fr​

*The world is as we shape it.

Sopra Steria's Cybersecurity Business Line is present in Europe with over 2500 experts - more than half of whom are in France - our mission is to provide trusted solutions and services to the most exposed public and private entities to ensure the resilience of their critical systems and protect their sensitive digital assets.​

Beyond its strong European presence, the cybersecurity division is positioning itself and developing in North America (Toronto), as well as in the Asia-Pacific region (Singapore). ​

We offer 3 service areas: Prevention, Protection & Detection, and Response. These 3 areas work together to provide our clients with consistent information and decision-making capabilities informed by operational reality. This approach is based on our cross-functional methodology centered on Mitre Att&ck. ​

Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience against cyberattacks and accelerate your digital transformation.​

• An end-to-end trusted solution​
• A "security by design" approach focused on business risks and transversal to the organization.​
• A commitment to the development of innovative sovereign solutions.​

Every individual can have an impact on responding to these new cyber risk challenges. Each person contributes both individually and collectively to securing our clients and society while maintaining their personal and professional growth.

Within the Cybersecurity Division, you will join the Protect Value Center, specifically the Application Protection team. You will act as an Application Security Engineer, whose goal is to secure applications end-to-end, from code to application flows. You will join a close-knit team that plays a major role in the security of all our clients.

Your role and missions:

Your expertise will be focused on major topics. More specifically, you will conduct various types of audits:

• SAST Audit: You will perform code audits (Java, .Net, Javascript, Angular) using a static code analysis tool and qualify the identified vulnerabilities.
• SCA Audit: You will perform audits of dependencies and libraries embedded in the application.
• DAST Audit: You will perform application audits following a checklist of control points (OWASP Top Ten Web & API coverage).
• You will propose remediations and assist developers in using security tools.
• You will capitalize on and document best practices, both agnostic and specific to each technology.
• You will train and mentor: you will support juniors and help them grow in application security.

What we offer you:

• A teleworking agreement to work remotely up to 2 days per week depending on your assignments.
• An attractive benefits package: health insurance, employee representative committee, meal vouchers, profit-sharing scheme, holiday and referral bonuses.
• Multiple career opportunities: over 30 job families, and as many career paths to imagine together.
• Hundreds of training courses to develop your skills and advance within the Group.
• Self-paced training platforms to prepare for your certifications and support your personal development.
• The opportunity to get involved with our foundation or our partner "Vendredi".
• The opportunity to join the Tech'Me UP collective (training, conferences, industry watch, and much more...).

Your profile: Graduated from an Engineering school or equivalent university degree, you have at least 6 years of experience in Application Security. You have already led security projects and contributed to defining a product strategy. You also have experience in Governance topics and a strong cybersecurity culture. Technical and functional skills

You master the use of one or more DevSecOps tools such as Gitlab, Jenkins, CheckMarx, Sysdig, Hvault, Kubernetes.

You are familiar with one or more programming languages: Java, .Net, Javascript, Angular, and also one or more of the following frameworks: OWASP, SAMM, ASVS, NIST. You have excellent oral and written communication skills, with a fluent level of English both written and spoken expected.

#LI-HYBRID #PF

CDI - Application Security Engineer - Toulouse - AppSec

As an inclusive and committed employer, our company works every day to combat all forms of discrimination and foster a respectful working environment. Therefore, committed to gender balance and diversity, we encourage all applications and all profiles.

https://www.soprasteria.fr/nous-connaitre/nos-engagements