CyberSecurity Platform Security Engineer
Mistral AIVisit Mistral AI website
Paris-based AI company building frontier models, AI applications, developer tools, and compute infrastructure for enterprise and public-sector deployments.
Paris, France
About Mistral AI
Mistral AI develops open-weight and commercial language models and provides a full-stack AI platform spanning agents, application development, custom-model training, APIs, and AI cloud infrastructure.
Skills
Ci/CdCloud-Native Application ProtectionCloud SecurityCloud Security PostureContainer OrchestrationContainer SecurityDependency ScanningGoInfrastructure-As-CodePlatform SecurityPolicy As CodePythonRisk ManagementSecrets ManagementSecurity EngineeringStatic Code AnalysisThreat ModelingVulnerability Management
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead threat modeling, vulnerability management, container security, and Infrastructure-as-Code security. You will integrate policy-as-code and security tooling into deployment pipelines, build security automation, improve remediation workflows, and establish secure defaults for developers.
Requirements
- Five or more years of Platform Security, Security Engineering, or Cloud Security experience
- Knowledge of container orchestration and container security
- Experience securing Infrastructure-as-Code across cloud providers
- Python or Go programming and scripting skills
- Experience with vulnerability management and threat modeling
- Experience integrating security tools into developer workflows
Responsibilities
- Drive threat modeling and risk prioritization in system-design reviews
- Own vulnerability management across deployment pipelines and runtime environments
- Secure container orchestration deployments and containerized workloads
- Define and enforce Infrastructure-as-Code security guardrails
- Integrate policy-as-code into deployment pipelines
- Design and manage cloud-native security tooling
- Build secure defaults, remediation workflows, and security guidelines
- Build security automation to reduce manual overhead