Cybersecurity Product Security Engineer
Paris-based AI company building frontier models, AI applications, developer tools, and compute infrastructure for enterprise and public-sector deployments.
About Mistral AI
Mistral AI develops open-weight and commercial language models and provides a full-stack AI platform spanning agents, application development, custom-model training, APIs, and AI cloud infrastructure.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will act as the dedicated security partner for product organizations and embed security throughout the product lifecycle. You will lead threat modeling, architecture reviews, risk assessments, security design and code reviews, and product-specific validation. You will help prioritize vulnerability remediation, improve SDLC security capabilities, coach engineers, and measure product security posture.
Requirements
- 5+ years of experience in Product Security, Application Security, or Software Engineering with a strong security focus
- Understanding of modern software architecture, distributed systems, APIs, and cloud-native applications
- Experience with threat modeling, architecture reviews, and secure design assessments
- Understanding of authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows, OWASP Top 10, and CWE
- Software engineering skills in Python, Go, TypeScript, or similar languages
- Experience with code review, penetration testing, and bug bounty programs
- Understanding of Secure SDLC principles
- Communication and influencing skills
Responsibilities
- Serve as the dedicated Product Security partner for product organizations
- Drive security across design, architecture, deployment, and ongoing operations
- Lead threat modeling, security architecture reviews, and risk assessments
- Define security requirements and secure-by-default patterns
- Review critical designs and code
- Design product-specific security validation strategies
- Prioritize and remediate vulnerabilities with engineering teams
- Improve reusable security platforms and SDLC guardrails
- Coach engineers and champion secure software engineering
- Define Product Security metrics and improve security posture
Benefits
- Healthcare coverage
- Parental leave
- Retirement plans
- Relocation support
- Wellness programs
- Meal allowances
- Transportation allowances
- Location-specific perks