Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset

classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining

data, research, technology and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex

challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.

As a Senior Security Engineer, you will help define and raise the security bar for applications and services across QRT. Working

closely with engineering teams, you will conduct security assessments, review system designs, identify vulnerabilities, and drive

security best practices across the software development lifecycle. You will propose pragmatic mitigations and help ensure services

are secure and resilient before launch. This role offers exposure to the full breadth of QRT's technology landscape, from cloud

platforms to low-latency trading infrastructure.

Your future role within QRT:

Conduct security design reviews for new and existing product, evaluating architecture documents, threat models, and system

designs for potential security risks.

Conduct threat modelling to identify attack vectors, security risks, and areas of concern in product design, so that security

is built in at every stage of the development lifecycle.

Partner with engineering and product teams to embed security into product design and development, drawing on your experience

securing large‑scale software systems.

Document, track, and communicate security findings to engineering teams with clear remediation guidance, verify fixes, and

advise development teams on secure coding practices.

Implement security controls and processes for product security, including core trading infrastructure, cloud services, and

business applications across both Windows and Linux environments.

Build and maintain a secure software development lifecycle (SDLC) with a focus on secure coding practices in languages like

Python, C++, Rust, Go and Kotlin/Java.

Mentor, guide, and train on security best practices and secure development processes to engineering teams working in mixed

cloud services and operating systems environments.

Integrate security scanning tools (SAST, DAST, etc.) into CI/CD pipelines and runtime delivering continuous monitoring and

threat detection across cloud services and on-prem systems.

Identify security risks and shape strategies for risk mitigation in a fast-paced high-stakes environment.

Your present skillset:

5+ years hands-on in product or application security, securing software development across large engineering organisations.
Deep knowledge of the security principles, attack surface, and remediation patterns for cloud platforms, SaaS tooling, and

internal applications. Reasons about threats and risks in terms of real impact, not abstract severity scores.

Finds vulnerabilities in infrastructure and application code, then produces proofs of concept that demonstrate risk, not just

severity.

Extensive hands-on experience with AWS and a clear grasp of the security boundaries of a hybrid environment with on-premises

infrastructure.

Read code fluently. Python, C++, Rust, Go, or Kotlin/Java: the language matters less than the ability to spot what is unsafe

and suggest a safer pattern.

Leads threat modelling sessions and turns the output into actionable mitigations for large-scale, complex systems in a trading

environment.

Communicate clearly, solve problems rigorously, and adapt under pressure.
Familiarity with trading financial systems is a plus.

QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and

respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to

enable employees achieve a healthy work-life balance.

Role

Senior Security Engineer

Similar Jobs

Security Analyst

Vestiaire Collective

Paris•Posted: Jun 2•Deadline: Aug 16

Vestiaire Collective is the leading global platform for desirable pre-loved fashion and a pioneer in transforming how people consume fashion. Our mission is simple: make circular fashion the norm, not the exception. Through technology, expertise, and a highly engaged global community, we enable millions of people to buy and sell fashion in a more sustainable way. Founded in Paris in 2009, Vestiaire Collective is now a globally scaled marketplace with offices in Paris, London, Berlin, New York, Singapore, and Ho Chi Minh City, and logistics hubs across Europe, Asia, and the US. Today, we are a team of around 600 people from over 50 nationalities, united by a shared ambition: to drive meaningful change in the fashion industry. Our values, Activism, Transparency, Dedication, Greatness, and Collective, shape how we build, collaborate, and grow every day. Please upload your CVs in English About the role : As a Senior Security Analyst at Vestiaire Collective, you will be part of our Security team. Your objective will be to provide a safe, secure, and trustworthy experience for our users, while safeguarding their privacy and personal data, as well as protecting our company assets and internal employees. Additionally, you will ensure compliance with regulatory requirements. This role is focused on security operations, risk, and assurance: you will be the person who keeps continuous watch over our security posture — monitoring and investigating alerts, driving vulnerabilities through to remediation, supporting incident response, and producing the evidence and metrics that demonstrate our security and compliance to auditors, regulators, and leadership. Reporting to the Head of Security, you will work alongside a talented team of security engineers and collaborate closely with engineering teams and other stakeholders such as legal, finance, and corporate IT. You will work daily with our security stack: Datadog (SIEM), SentinelOne (EDR), Upwind (CSPM), Cloudflare (WAF and Cloudflare One), and Grafana/Prometheus, on top of our AWS and GCP cloud environments. What you will do : Operate and continuously improve our security monitoring: triage and investigate alerts across our detection stack (Datadog SIEM, SentinelOne EDR, Cloudflare), tune detections to reduce noise, and escalate confirmed threats. Review and prioritize cloud security posture findings (Upwind CSPM) across our AWS and GCP environments, and drive misconfigurations through to resolution with the relevant teams. Own the vulnerability management lifecycle: consolidate findings from penetration tests, application security reviews, and our bug bounty program; validate and prioritize them; and drive remediation with engineering teams against defined SLAs. Triage incoming bug bounty submissions: reproduce and assess reported issues, determine severity, and coordinate fixes with the relevant code owners. Support incident response from detection to closure: first-line investigation, coordination during incidents, documentation, and post-incident follow-up actions. Support audit and assurance activities: prepare and maintain evidence for external audits, run periodic access reviews (joiners/movers/leavers, privileged access), and keep compliance documentation up to date. Contribute to security metrics and reporting: maintain and enrich the KPIs and dashboards (Grafana) we use to report our security posture to leadership. Assess third-party vendors and tools from a security and data-protection standpoint. Handle day-to-day security requests from across the company (reported phishing, the security inbox, employee questions) and deliver security awareness initiatives to promote a security-conscious culture. Who you are : Proven experience (3+ years) in a security analyst, SOC, or security operations role, preferably in a fast-paced startup/scaleup environment. Strong analytical and problem-solving abilities, rigorous documentation habits, and the ability to communicate clearly with both technical and non-technical stakeholders. Hands-on experience with SIEM and log analysis platforms (e.g., Datadog, Splunk, Elastic) for alert triage, threat detection, and investigation; familiarity with EDR tooling (e.g., SentinelOne, CrowdStrike) is a strong plus. Working familiarity with cloud environments (AWS and/or GCP) and cloud security fundamentals - enough to understand, prioritize, and follow up on CSPM and WAF findings. Solid understanding of vulnerability management and common application threats (e.g., OWASP Top 10) - enough to validate findings, assess real-world impact, and discuss remediation credibly with engineers. Understanding of compliance frameworks and regulations (e.g., ISO 27001, PCI DSS, SOC 2, GDPR, DSA), with the ability to translate requirements into practical controls, procedures, and audit evidence. Scripting or query skills (e.g., Python, SQL), for automating routine analysis and digging into data during investigations. Ability to adapt to a rapidly changing environment and manage multiple priorities. NICE TO HAVE: Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Relevant certifications (e.g., CompTIA Security+/CySA+, GIAC GCIH/GCIA, CISA, ISO 27001 Lead Auditor/Implementer) are a plus. Our Tech Stacks includes Datadog SIEM Upwind CSPM Cloudflare (WAF, One) SentinelOne AWS, GCP Grafana, Prometheus Snowflake Tableau

Senior DevOps Engineer

Alma

Paris•Posted: Jul 16•Deadline: Aug 16

🧡 ABOUT ALMA At Alma, we believe sustainable commerce depends on fair, well‑balanced trade. Because finance plays a pivotal role in business, our mission is to put it back in its rightful place - serving merchants and consumers. Our installment and deferred payment solutions help merchants boost sales by 20% or more, increase customer loyalty, and deliver a seamless shopping experience - without encouraging bad debt. As the buy now pay later leader in France and active in 10 European countries, we've empowered over +25,000 merchants and 10 million consumers. With 380+ Almakers and €100M+ ARR, Alma is scaling rapidly across Europe as a member of the Next40, and we're just getting started! 👐 ABOUT THE TEAM The Developer Experience (DevX) squad is part or the Engineering’s Platform Tribe. The Platform Tribe groups the DevX squad and the Site Reliability Engineering quad. The members of the tribe are responsible for building the foundational infrastructure, security layers, and core systems that empower Alma's entire product and engineering organization to scale reliably. You will join a dedicated squad focused entirely on the daily lives of our engineers: Our mission is to eliminate friction from a developer's machine all the way to production. We build, optimize, and maintain the delivery systems, local development environments, and CI/CD automation that allow our product teams to ship high-quality code safely, frequently, and with absolute confidence. We operate in a highly dynamic, polyglot environment. We are looking for an engineer driven by technical curiosity, who loves exploring new tools and technologies to continuously elevate our engineering standards. This is a full-time position, based in Paris or fully remote in France. 💼 ABOUT THE JOB * Own and continuously optimize our CI/CD pipelines and delivery workflows, ensuring fast feedback loops and secure deployments. * Build and evolve the local developer experience, making it seamless for engineers to spin up, test, and debug services locally across a variety of languages and frameworks. * Own and maintain part of our cloud infrastructure and container orchestration platforms using Terraform and Kubernetes. This will also require participating in identifying and solving infrastructure-related production issues and performance troubleshooting, upgrading our platforms for long-term resilience. * Be a technical referent and drive engineering standards forward by acting as a trusted partner for product engineering squads on delivery and infrastructure best practices, sharing expertise and providing guidance. * Encourage a culture of technical curiosity by frequently evaluating, benchmarking, and prototyping emerging technologies to bring the best tool sets to the team and promoting a culture of continuous learning across the org. 🧰 YOU WILL WORK WITH Python, TypeScript, PHP, Docker, Kubernetes, Terraform, GitHub Actions, GCP, Postgres and Datadog. 🧩 ABOUT YOU To succeed in this job * You've built at least 5 years of experience in a relevant role, ideally in DevOps or Platform Engineering. * You take ownership of cross-functional infrastructure initiatives, driving complex projects from design to delivery alongside multiple teams. * You have hands-on experience designing, building, and optimizing CI/CD pipelines end to end (GitHub Actions or equivalent). * You're comfortable building robust automation pipelines and modernizing local development environments. * You are fluent in french (primary working language) with a good level of English, for documentation, cross-team exchanges, and technical reading, writing as well as presenting. And it will be nice if you also * Have production-grade proficiency with Infrastructure as Code (not necessarily Terraform) and container orchestration (not necessarily Kubernetes). * Are familiar with an observability and monitoring stack (Datadog, Prometheus, or equivalent). * Have worked with local development environment tooling (Nix, mise, asdf, devenv, devcontainers, etc.). * Working knowledge of at least one language from Alma's stack (Python, TypeScript, or PHP), enough to read, debug, and contribute when needed. Don't meet every single requirement? At Alma, we believe great hires come from diverse paths. If this role excites you, we encourage you to apply. We value potential, curiosity and the ability to grow as much as experience. 🧘 WHAT’S IN IT FOR YOU If you join, you will be able to grow and impact on: * The infrastructure and tooling that directly shapes the productivity and confidence of every engineer at Alma. You'll have real ownership over your scope, the space to explore and prototype freely, and the support to take initiative. * The DevX squad, a dynamic, polyglot team where learning together is a core habit, not an afterthought. * Alma's growth across Europe, as the infrastructure you build directly enables us to scale reliably across 10 markets and more in the future, your work has a clear and measurable line to the business. 🤑 COMPENSATION & BENEFITS * Competitive salary based on 12 months * Profit-sharing and employee savings plan * Health insurance: 100% covered by Alma including family package * Disability insurance: 100% covered by Alma * Sport: partnerships with Gymlib and Classpass, or €30/month reimbursement for your sports activities * Maternity/paternity leave: salary maintained at 100% during leave with no seniority requirement. Return to work at 4/5 schedule paid at 100% for 8 weeks. * Sustainable Mobility Package (FMD): €544.80/year (excluding full-remote contracts) * Meal vouchers: €10/day, 50% covered by Alma * Mental health: free access to MindDay platform * Paid time off: 25 days/year ****(+ additional paid leave granted for employees on executive contracts) * Access to our Learning & Development Platform * 2 weeks of full remote possible per year in summer for people working in hybrid remote 🎯 INTERVIEW PROCESS * Video call with a Talent Acquisition team member to understand your path, motivation & present you the role. * Video call with your future manager to deep dive the role, the team, your profile and answer all your questions. * Case study presentation with 2 - 3 team members (ideally in house) to assess your practical knowledge**.** * Take-home coding test, followed by a remote feedback session. * Live system design interview to assess your practical and architectural knowledge. * A coffee chat with the squad you’ll join to further assess your skills and team fit. 🌍 DIVERSITY & INCLUSION At Alma, we believe that diversity fuels innovation and makes our community stronger. We are committed to building a workplace where every person feels seen, respected, and empowered to do their best work whatever their gender, background, ethnicity, age, sexual orientation, religion, disability or lived experience. As an equal opportunity employer, we welcome applicants from all walks of life, and all employment decisions are made based on qualifications, merit, and business needs.

Senior Data Engineer (x/f/m)

Doctolib

Paris•Posted: Jun 4•Deadline: Aug 16

YOUR IMPACT We are looking for a Senior Data Engineer into our engineering team at Doctolib. Your mission will be to build data products that provide insights and support decision-making across Doctolib, helping to transform access to healthcare. You will work in a feature team developing data pipelines and solutions that empower our organization with data-driven insights while supporting our AI strategy, enabling health professionals to deliver better care and helping millions of patients access quality healthcare. Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients. WHAT YOU'LL DO Your responsibilities include but are not limited to: * Build and maintain data pipelines using Python (Dagster) to support Doctolib's AI strategy * Develop and maintain data marts in BigQuery using SQL/Jinja, DBT * Create dashboards for high-level reporting using Tableau * Collaborate with stakeholders to understand their data needs and define specifications * Ensure data quality, security (GDPR compliance), and availability through monitoring and optimization WHO YOU ARE Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply. You'll be a great fit if you: * You have at least 7+ years of experience as a Data Engineer, or a similar role * You have a first experience using code assistant (Claude, Cursor) * You are proficient in Python, SQL, and DBT for building data pipelines * You have experience with BI tools such as Tableau, Metabase, or similar platforms * You have first experience with Google Cloud Platform (GCP) stack * You have a good understanding of functional aspects of data (Sales, Finance, Web Analytics, Product) * You have strong communication skills and can collaborate effectively with business teams * You are fluent in English It would be fantastic if you: * Have experience with AI products * Have experience with Vertex AI * Are familiar with GDPR regulations LIFE AT DOCTOLIB TECH * Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements. * Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native. * We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here. Want to learn more about our tech culture and environment? Visit the Doctolib Tech site. WHAT WE OFFER * Free comprehensive health insurance (basic package) for you and your children * 25 days of paid vacation per year, plus up to 14 days of RTT * Free mental health and coaching services through our partner Moka.care * Work from abroad for up to 10 days per year thanks to our flexibility days policy * Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib * A subsidy from the work council to refund part of the membership to a sport club or a creative class * 50% reimbursement of your public transport subscription * Parent Care Program: receive one additional month of leave on top of the legal parental leave * Enrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth * For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support * Relocation support in case of international mobility * Access to the best AI tools for coding, development and dedicated training OUR INTERVIEW PROCESS * Recruiter Interview * Coding Interview * System Design * Behavioral interview & Meeting with the team at the office * At least one reference check We want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our candidate experience page. JOB DETAILS * Permanent position * Tech stack: Python, SQL, DBT, BigQuery, Tableau, Dagster * Full-time * Paris * Hybrid work setup (up to 2 remote days per week) * Start date: as soon as possible WE WELCOME EVERYONE At Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination. The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability. To ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process. Join us in building the healthcare we all dream of! YOUR DATA PRIVACY All information provided is processed by Doctolib for application management. For data processing details, click here: Germany l France l Italy l Netherlands. Please contact hr.dataprivacy(at)doctolib.com for inquiries or to exercise your rights.