Platform Security Engineer (x/f/m)

About this role

Responsibilities

• Your responsibilities include but are not limited to:
• Own a platform security workstream end to end, from architecture to enforcement: scope it with your tech lead, design the control, roll it out progressively (report-only, then enforce), handle exceptions, and see it through to full coverage. Typical examples: hardening IAM across our AWS accounts, tightening cluster admission policies, or closing a class of misconfiguration for good.
• Ship every change as code: Terraform and GitHub pull requests, peer-reviewed and always reversible. No console clicking, no undocumented state.
• Harden our cloud and infrastructure baseline and keep it hardened: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls — building the guardrails and driving remediation of what they surface with platform and engineering teams, turning recurring findings into automation rather than tickets.
• Investigate and improve: lead incident investigations on the platform perimeter end to end, and continuously improve detection rules and response playbooks in our Elastic SIEM.
• Work in the open: write clear technical notes, drive adoption of your changes with the engineering teams they affect, and grow through code review and pairing with the rest of the team.
• Who you are
• Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.
• You'll be a great fit if you:
• Have 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure or platform engineering, including some exposure to a cloud environment (AWS, GCP or Azure) in production — an internship or apprenticeship in one of those roles counts.
• Work daily with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests, and you are comfortable operating and debugging workloads on Kubernetes.
• Use AI coding assistants (Claude or equivalent) as a normal part of how you work.
• Have carried at least one project through to production — security or not — and stayed with it past the first deployment until it was actually adopted.
• Have solid fundamentals: Linux, networking, cloud, Kubernetes and development/scripting, a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills — you can carry a proposal from draft to cross-team adoption.
• Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.
• It would be fantastic if you:
• Have worked with a SIEM (Elastic, Splunk, or equivalent), writing and tuning your own queries.
• Have done detection engineering, incident response, threat hunting, or CTFs.
• Can point to public write-ups, open-source contributions, or a home lab.
• Have prior experience in a regulated industry (healthcare, fintech, or public sector).
• Life at Doctolib Tech
• Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.
• Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.
• We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here.
• Want to learn more about our tech culture and environment? Visit the Doctolib Tech site.