Staff Security Engineer (CDI)

As a Staff member at Matera, you contribute to defining and implementing the technical vision for security: you set standards, improve SecOps, and initiate structuring projects to build a higher quality product with better velocity, ensuring its security. Your impact is measured at the company level.

Specifically, your missions will be:

• Identify and lead projects to evolve our security practices across the entire company

• Contribute to the overall technical vision alongside the CTO and other Staff members

• Implement measures to secure our clients' accounts and data, as well as our software development chain

• Improve our MTTD and MTTR for security breaches and vulnerabilities

• Implement continuous monitoring of our applications with a modern stack

• Conduct pentesting on our applications to identify vulnerabilities

• Work with squads to remediate vulnerabilities and improve our coding practices for better security

• Implement solutions and practices to ensure our regulatory compliance

• Train employees on key cybersecurity challenges

• Mentor developers of all levels to raise the collective skill level

Our Stack:

• Frontend: React, Typescript, React Native (mobile), Jest, Playwright, Maestro

• Backend: Ruby on Rails, Sidekiq, Rspec, Cucumber

• PostgreSQL, Opensearch, Redis

• Infrastructure: AWS, Kubernetes, Terraform, Grafana, Loki, Tempo, Prometheus

Our Organization:

Autonomous Squads – Squads of 5 developers with an EM, responsible for end-to-end maintenance of their domain, but also involved in very different areas for the creation of new features.

AI-first – 100% of the code is generated by AI via Cursor and a plan orchestrator integrated into the repo. This is not a bonus, it's our way of working. We expect you to master these tools and know how to get the most out of them.

Collective Intelligence – Developers get involved early in product thinking. Proactiveness is expected, not a bonus.

Pragmatism & Efficiency – Methodology close to Kanban. We deliver, we learn, we improve.

Flexibility – Flexible hours, remote work possible with 2 days of office presence per week.

Adaptability – Our business evolves quickly, and so does our organization. You must be comfortable with change, even seek it out — someone who is stimulated by novelty rather than destabilized by it.

Benefits:

Compensation: starting from €88,000 depending on profile and experience,

Location: Paris, Lyon, Annecy, Bordeaux, Marseille, Toulouse

Contract: Cadre forfait jour (Executive daily lump sum contract)

Remote Work: 2 days of office presence per week

Onboarding & Development:

• 2 weeks of onboarding to understand Matera's functioning and values, and job-specific onboarding,

• Structured career path: weekly support from your manager, annual performance review, internal mobility encouraged

• Transparent internal compensation policy.

Quality of Life

• Parental support policy: a smooth return to work at 80% for 4 weeks (paid at 100%), as well as 5 additional days of leave per year for sick children,

• Responsible Commute Time (TTR): 1 additional paid day of leave per year to favor responsible transportation for your vacation travel,

• Menstrual leave

• Sports: access to WellPass for affordable sports activities,

• Cultural deals with the Leeto platform (cinema, museum, amusement park discounts...).

Legal Basis

• Paid leave and RTT (Reduction of Working Time)

• Mutuelle & Swile Card - 50% covered

• 100% coverage of provident fund

• 50% coverage of transportation costs

• A computer and equipment will be provided

5+ years of experience in security engineering, with solid expertise in application security, cloud, and architecture, and a demonstrated ability to define standards, influence engineering teams, and reduce risks on complex systems.

Beyond experience, what we're truly looking for:

• A long-term security vision. You know where you want to take our security practices in 1 to 3 years. You have a plan, you defend it, and you implement it — by breaking down complex projects into iterations that can be delegated to squads rather than doing everything yourself.

• The ability to evolve standards. You don't just apply best practices, you (re)define them. You initiate debates that wouldn't happen without you, and you get the entire team to adopt their conclusions.

• True autonomy. You don't need to be prompted. You identify problems before they are reported to you, you propose solutions, and you carry them out — sometimes without a PM, often involving the whole team.

• AI as a primary tool. You use Cursor and LLMs daily, you know how to prompt, iterate, and especially how to critique what AI produces. You don't delegate blindly. You are sensitive to the security of AI agents.

• A collective leadership mindset. Your work makes others better. You mentor all levels, and you ensure that what you build is understood and adopted — not just delivered.

• A product sense. You integrate business constraints into your technical decisions.

Bonus Points

• Experience in implementing certifications (ISO 27001, SOC)

• Experience in Ruby on Rails

• Experience with banking products

• Security certifications

Recruitment Process:

1️⃣ We review your application

2️⃣ Call with Mavrick (VP Engineering) to discuss the role

3️⃣ 2 Technical interviews (Algo interview & System Design Interview)

4️⃣ Meeting with your future team

5️⃣ Reference check

🕚 Allow 2 weeks to complete the entire recruitment process.

Good to know:

🕑 We strive to provide feedback on your application as quickly as possible (within a week). Whether the feedback is positive or negative, you will receive an email from us - remember to check your spam folder just in case.

☝️ If you require specific accommodations to complete the interviews under the best conditions, you can notify us when applying and inform the Recruitment team.

Find Jobs in France on Arbeitnow