Security Engineer - Tech Lead (f/m/d)

Our Cybersecurity Team is looking for a Tech Lead Engineer based in Lille or Paris

The Decathlon Cybersecurity team ensures the protection and security of the entire group: it steers the governance strategy and risk management processes, ensures the compliance of our information systems, defines the technical means necessary for incident detection and response, as well as the associated control means.

Information Security is a key focus for Decathlon. Protecting the data of our customers, our employees, and our brand image is our priority. With the help of a security governance structure initiated 4 years ago, we want to accelerate certain projects to support our digital transformation.

To this end, we are looking for our next Application Security Engineer, integrated into our Security Engineering team. The team's mission is to secure the application lifecycle, from code (SAST / SCA), to the Cloud (CNAPP / CSPM / CWPP), to its exposure on the internet (WAF / External Exposure) by helping to define governance, improving existing processes, and implementing the necessary tools.

YOUR FUTURE CONTRIBUTION

As a Tech Lead, you will be the driving force of the team and a technical reference. Your main responsibilities will be:

• Challenge the team: question the technical choices of the Security Engineering team and contribute with them to the implementation of strategic initiatives
• Team management and strategy: manage the team on a daily basis, define priorities and allocate resources, in line with the company's overall strategy and the cyber roadmap
• Project management (RUN and BUILD): track tickets and projects via Jira, ensure the progress of strategic initiatives (BUILD) and oversee the smooth execution of operational activities (RUN)
• Sharing and communication: document and share security best practices, and be the point of contact for other teams
• Strategic contribution: participate in a range of broader cyber initiatives, beyond application security, including Cloud security and management of assets exposed on the internet

TECHNICAL STACK

• Public cloud: AWS / GCP
• CI/CD: GitHub
• Security tooling – code: Snyk (SAST / SCA) and Wiz Code (PoC)
• Security tooling – cloud: CNAPP (Wiz)
• Security tooling – exposure management: Cloudflare / Wiz
• Infrastructure as Code: Terraform
• API Management
• Authentication and authorization protocols: SAML, OAuth2.0, OIDC, …
• Collaboration tools: Slack, Google Workspace, Confluence, Jira

WHAT YOU BRING

• Solid experience in software development, security (SAST/SCA), SDLC, CI/CD pipelines, containers, and Cloud environments (AWS, GCP). Mastery of authentication protocols (OAuth2/OIDC) and API management.
• Experience in team management, work organization (Jira), and defining technical strategy. Results-oriented with a pragmatic approach focused on risk management.
• Excellent communication and collaboration skills, complex problem-solving abilities, capacity to code and fix code, and to simplify technical concepts.
• Proficiency in English to collaborate effectively with international teams.

WHAT WE OFFER YOU

• 2 days of remote work per week;
• Possibility to work in one of Decathlon Digital's offices in Lille or Paris;
• Equipment provided in line with your tasks and our societal commitments (Mac, Windows, or Chromebooks);
• A local project team within a global network (possibility of international career);
• Skill development and support (diversity of projects, technical certifications from the first year, internal and external training, etc.);
• Compensation package (employee participation in company shares, monthly/quarterly bonuses).