LLM Platform Engineer/Lead (m/f/d)

Deezer

LIVE THE MUSIC WITH US From a pioneer tech start-up created in 2007, Deezer has become one of the first French unicorns and the second largest independent music streaming platform in the world. At eighteen years old, we’re only just coming of age. Now listed on #EuroNext, Deezer is a rapidly-growing, cutting-edge player in the music streaming market. If you want an environment where you can make your voice heard and be at the forefront of music and tech, look no further! We believe music is all about embracing the things that make us different. Deezer is a vibrant community that celebrates uniqueness, diversity and individuality, and thrives on collaboration. Our international and passionate teams pride themselves on being at the forefront of the music experience, going beyond streaming and helping the world to Live the Music. We’re constantly evolving alongside our customers, partners, artists and employees — striving to make Deezer the most personal and innovative streaming service in the world. Ready for an electrifying journey? Apply now and do your part in bringing extraordinary music experiences to people’s lives! **Join Us** JOB DESCRIPTION Position based in Paris As a Senior Expert Platform Engineer in the DevXP team, you will shape our Internal Developer Platform (IDP). You will drive platform strategy, architecture, and execution to help engineers ship faster, safer, and with higher quality. A key part of your role will be to actively collect needs and best practices from engineering teams, turning those insights into relevant, well-grounded platform solutions. You will set engineering standards along with senior engineers from the whole company, mentor peers, and bridge platform engineering with AI and cybersecurity. Responsibilities * Platform Engineering - Architect and evolve the IDP, CI/CD pipelines, and automation frameworks. Own the long-term technical vision, define platform standards (IaC, GitOps), and select best-in-class tooling across build, deployment, monitoring, and security. * Developer Experience - Proactively identify and eliminate friction across the software lifecycle. Track DX metrics (DORA, SPACE) and use data to prioritize platform investments. Be the internal advocate for developers. * AI-Augmented Platform - Integrate AI capabilities into the platform (intelligent code review, anomaly detection, smart test generation). Evaluate and operationalize AI tools (GitHub Copilot, LLM-based assistants) and explore agentic automation to reduce developer toil. * Security & Compliance - Embed security-by-design into every platform layer: secure CI/CD (SAST, DAST, SCA, secret scanning), supply chain integrity (SLSA, SBOM), and least-privilege access. Lead our journey toward a DevSecOps culture, building the practices, automation, and mindset that will make security a first-class citizen across all engineering teams - an ambition we are actively working toward. * Reliability & Observability - Define SLOs/SLAs for platform services, ensure full-stack observability, lead incident response, and conduct blameless post-mortems. * Cross-functional Leadership - Collaborate with Engineering, SRE, Infrastructure, and Security teams. Mentor engineers, represent DevXP in architectural forums, and communicate technical trade-offs to diverse audiences. QUALIFICATIONS Qualifications * Degree in Computer Science or equivalent. * 8+ years in platform engineering or DevOps, with 3+ years at senior/expert level. * Track record of operating platforms at scale; fluency with TDD, trunk-based development, and continuous delivery. Required Skills * Platform & DevOps - CI/CD (GitHub Actions), GitOps, IaC (Terraform), Kubernetes, Docker, ArgoCD, GCP (GKE) * Observability - Prometheus, Grafana; SLO/SLI/error budget management. * AI & Automation - Hands-on integration of AI tools in engineering workflows; MLOps familiarity. * Leadership - Technical influence without direct authority, mentoring, strong communication. Nice to Have Skills * Platform & DevOps - Jenkins, Ansible, Cloud Run), testing strategies, Python/Go/Bash. * Observability - OpenTelemetry * Security - DevSecOps pipelines, SAST/DAST/SCA, SBOM, SLSA, policy-as-code (OPA, Kyverno), zero-trust principles. At Deezer, diversity drives innovation. Whatever makes you uniquely you, your experiences, your way of thinking, your journey, might be exactly what we need. If this role speaks to you and aligns with your interests and capabilities, even if you don’t meet 100% of the qualifications listed, please give it a try and tell us more! #BeYou ADDITIONAL INFORMATION At Deezer, you can be your true self as we believe that #everyvoicematters. We strive to build an inclusive culture and foster a diverse environment. Because we care and want to ensure each employee feels welcome and safe at work, we continuously focus on fighting biases and helping diverse teams work well together through multiple learning opportunities, e-learnings and workshops right from the onboarding : * Regular Diversity & Inclusion internal and external talks * Dedicated employee work streams on Gender equity, Ethnicity & Culture, Disability, Parenthood (signatory of the Parental Challenge) and LGBTQIA+ * Multiple e-learnings and mandatory training sessions for all managers * English and French courses for all, so that everyone can connect and feel included Beyond benefits like transportation, we offer you extra perks like: * A Deezer premium family account for free * Access to gym classes * Join over 70 Deezer Communities to connect beyond your day-to-day work, share passions, learn from each other and #Belong * Deezer parties several times a year and drinks every thursday * Allowance for sports, travelling and culture * Meal vouchers * Mental health and well-being support from Moka.Care * Great offices always located in dynamic and attractive districts, whether in Paris, London or Sao Paulo! * Hybrid remote work policy If you want to learn more about life and culture at Deezer, please visit our Welcome to the Jungle page here!

Upvest

At Upvest, we are on a mission to make investing as easy as spending money. Upvest empowers businesses to offer a wide range of investment products and the best experience in the field of capital market investment and retirement planning. Upvest’s Investment API is easy to integrate so that fintechs and financial institutions can save resources and fully focus on their core business. We are proud to partner with Europe’s leading Fintechs and financial institutions such as DKB, Revolut, N26 and Raisin. Founded in 2017 by Martin Kassing, Upvest now brings together over 270 talented professionals from more than 70 nationalities. Upvest is backed by €280M in total funding from world-class investors, including BlackRock, Tencent, Sapphire Ventures, and Bessemer Venture Partners, Earlybird, Notion Capital, and Motive. Our latest €105M funding round in March 2026 - led by Sapphire and Tencent - serves as a massive catalyst for our growth, allowing us to offer premier investment experience. ABOUT THE ROLE: Upvest is at the inflection point where security needs to scale and remain a foundational discipline of the company. We're hiring a Security Engineering Lead to step into our lean and efficient Security team, set its multi-quarter direction, work cross-functionally and scale Security Engineering into a team that continues to own Upvest's entire application security and cloud security posture in a highly regulated environment as it scales. This role sits alongside our Security Operations and GRC teams, which owns detection, response, and compliance operations. Where SecOps keeps watch over what's happening now, Security Engineering shapes what we build and how we build it, embedding security into the SDLC, hardening our cloud environment, and building the platforms that make security teams more effective. You will own the secure paved roads every Upvest engineer relies on: automated SAST/DAST/SCA in our GitHub Actions pipelines, SSDLC adherence, IAM and network controls, and the technical implementation of DORA's (and other regulations') ICT risk framework for our platform. Our mission for the team is simple: make the secure way the easy way for everyone at Upvest. WHAT YOU’LL DO: * Set the multi-quarter strategy for application and cloud security across Upvest's Investment API platform — aligned with our product roadmap, our tenant commitments, and our regulatory obligations under DORA, MiFID II, and BaFin's MaRisk / BAIT requirements. * Lead, mentor, and grow our Security Engineering and Upvest's security culture. You'll inherit a small, talented team and own hiring, onboarding, growth, and retention as we scale. And you'll create initiatives to build security into the development and product life cycle. * Build paved roads. Own how Upvest performs encryption, authN/authZ, CI/CD, data, and network surfaces. We want fewer security review queues and more security baked into the templates. * Own application security end-to-end. Threat modeling, secure code review, SAST/DAST/SCA tooling integration in our GitHub Actions CI/CD, and vulnerability management. * Drive better cloud security posture across our GCP environment — IAM, VPC Service Controls, Cloud KMS, CSPM (Wiz), Binary Authorization for GKE, Terraform-driven infrastructure security baselines, and our Linkerd service mesh posture. * Mature Upvest's DORA technical implementation. Partner with our risk and compliance functions to translate DORA's ICT risk framework (Art. 5–9), secure development testing requirements (Art. 16), and threat-led penetration testing (Art. 24–27) into engineering work programmes — and into evidence we can show auditors and regulators. * Embed security in every product design. Partner deeply with product and engineering teams. Architecture reviews, design partnerships, security champions across product squads, collaboration beats gatekeeping. * Stay current on emerging threats. AI / LLM security, agentic identities, and the secure use of AI tooling in our own engineering workflow are an active concern * Represent Upvest's security posture clearly to everyone WHAT YOU BRING: * 6–10 years in security engineering, with 4+ years focused on product security or cloud security, and you work well in a regulated environment. You don't need to check every box, but we're asking for evidence that you've taken security from "owned by one team in a queue" to "embedded in how an engineering org ships." * Hands-on, technically credible. You earn the trust of engineers by going deep, so you're comfortable reading code, threat modeling designs, debating architectures, and writing tooling when it's valuable. * Cloud-native security depth. GCP preferred; AWS or Azure transferable. You know IAM, network segmentation, KMS, IaC security (Terraform), and Kubernetes hardening (RBAC, network policies, Pod Security Standards) as a craft. * Product/Application security foundations. OWASP Top 10 / ASVS, secure code review, SAST/DAST/SCA tooling integration, supply-chain security (SLSA, signing). * Lead through influence, not gatekeeping. You drive security outcomes through partnership with engineering teams. You can navigate ambiguity, set direction, and make sound risk-based decisions that scale with the organisation. People want to work with you, because you don't just say "no", you say "yeah, and this is how". * Hire and grow people. You've built or grown a small team. You set a high bar in interviews, invest in onboarding, give real-time feedback, and address performance issues quickly and fairly. Communicate cleanly across audiences e.g. a security incident write-up to engineering, a control narrative to an auditor, and a risk briefing to executives are three different documents, and you can write all three. NICE TO HAVE: * Experience securing multi-tenant B2B platforms or financial-API products: tenant isolation, API-as-product safety boundaries, and the specific operational shape of selling to regulated customers. * Experience with trading, custody, or securities settlement platforms, or curiosity about that domain. * Bug bounty / VDP programme management. * In a past life, you have shipped backend code in production, and you're comfortable in Go (preferred), Python, or another modern backend language. * Regulatory fluency. Working knowledge of DORA, MaRisk, BAIT, ISO 27001. You can change audit-speak or regulation into actionable technical requirements other people understand. You can hold your own with auditors and regulators without losing engineering pragmatism. * Background in engineering and offensive security * German skills are useful for some potential client interactions, but not required. Our working language is English. * Hands-on experience with AI/LLM security, agentic identity, or securing AI tooling in an engineering workflow. * Familiarity with the operational side of security is a bonus, hands-on experience with EDR and SIEM platforms, or a background in incident response. This matters in practice, you'll be part of the security on-call rotation, so being comfortable picking up an active incident is real, not theoretical. HOW WE UPVEST IN YOU: * Best-in-class AI tools: Every Upvenger has €20,000 per year to spend on the best AI tools available — so you're always working with the most powerful models and tooling on the market. * Impact-driven work: We’re building the infrastructure that will power the future of investing in Europe. It’s complex, ambitious, and meaningful. You’ll work with modern technologies and create something entirely new. No legacy systems, no limits. * Wellbeing: Recharge with 30 days of annual leave and maintain a healthy lifestyle with sports benefits. Access confidential professional coaching and enjoy the flexibility to work remotely abroad for up to 183 days a year. Recharge with UpRest, a one-month fully paid sabbatical after every 4 years of working at Upvest. * Development: Growth is in our DNA. Each Upvenger has access to a personal development budget and the freedom to decide how to use it. * Flexible work environment: Work from any of our hubs in Berlin, London or Tallinn hybrid or remotely across Europe, depending on the role. We give you the choice and budget to work where you’re most comfortable and productive, either at home or in the office. You choose. * Compensation and equity: We believe that all Upvengers contribute to our success and deserve a competitive, above-market salary and a participation in our employee equity program. * Team celebrations: Participate in company-wide events, such as UpFest, dinners, offsites and our Holiday party, to connect with colleagues and celebrate our achievements. * Inclusion: We’re committed to a culture where everyone belongs and thrives. Our Employee Resources Groups foster inclusion and connection, like Upfem for our female Upvengers, or UpVergent supporting neurodivergent Upvengers and allies. OUR VALUES: * Make it easy for others. We simplify the complex and act with the best intentions. * Own the outcome. We are proactive, fast and confident to get the job done, valuing progress over perfection. * Rise to the challenge. We aim high and push the boundaries. We stay curious, learn and celebrate our wins together. * Tell the story. We start with the Why to align on purpose. We are transparent and share knowledge to empower and inspire others. Upvest is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Langdock

ABOUT LANGDOCK We help organizations drive internal AI adoption through our enterprise-ready AI platform. Our product suite includes AI Chat, Assistants, Search, API, and Workflows - enabling companies to roll out AI internally and build custom AI use cases. We serve over 7,000 customers, from DAX companies to startups, including enterprise clients like Merck KGaA, Der Spiegel, GetYourGuide, Babbel, and Personio. We are model-agnostic, fully GDPR-compliant, and ISO 27001 & SOC-2 Type 2 certified. Made in Germany, backed by Y Combinator. ABOUT THE ROLE AI is the biggest transformation of our lifetime. Most companies know they need to move. Few know how. This is where you come in. As an AI Adoption Engineer in Langdock's Customer Success team, you turn ambition into working solutions. You sit at the intersection of customer, product, and engineering: discovering high-value use cases, scoping them, building them, and making sure they stick. You understand a customer's workflows, identify where AI creates real leverage, and deliver solutions they can maintain and scale on their own. This is a technical role. You write code. You build MCP servers and custom integrations. You work with agentic coding tools daily. You understand our platform at the code level and you're comfortable operating at the boundary between product and engineering. Everyone at Langdock builds AI agents and workflows to automate their own work. As a AI Adoption Engineer, you set the standard for what that looks like. You work project-based with our most relevant customers: running use case workshops, leading on-site hackathons, building complex agents and integrations, and handing over production-ready solutions. You also serve as the technical expert during Sales conversations, helping prospects understand what's possible and how Langdock fits into their architecture. You work closely with Customer Success to drive adoption, with Product and Engineering to push the platform forward, and with Marketing to create reusable resources that help customers build independently. When you hit a platform limitation, you articulate what needs to change and why, and work with the team to make it happen. WHAT YOU WILL DO * Discover and scope high-value use cases: run AI Use Case Workshops, Department Deep-Dives, and Scoping Sessions to identify where AI creates the most impact for each customer. * Build and deploy solutions: lead On-Site Hackathons, Implementation Sprints, and Architecture Reviews; deliver working agents, integrations, and workflows that customers can own and maintain. * Serve as a technical expert during the Sales process: join sales conversations to answer technical questions, build tailored demos and proof-of-concept environments, evaluate integration architectures, and help prospects understand what Langdock can do for them. You are the person in the room who makes the product feel real for a technical buyer. * Drive use case adoption: make sure customers actually adopt what you build; create documentation, run Office Hours, provide hands-on support, and enable power users to build independently. * Create reusable resources: build templates, documentation, and reference architectures that Account Management and Marketing can share with customers and prospects. * Push the platform forward: identify product limitations blocking high-value use cases, articulate requirements clearly, and work directly with Product and Engineering to close the gaps. * Build your own tools: build MCP servers, develop custom integrations, and use agentic coding tools to build on top of the platform and automate your own workflows. WHAT WE'RE LOOKING FOR You have 3+ years of experience in a technical, customer-facing role - Solutions Engineering, Technical Customer Success, Technical Consulting, or similar - where you both built things and worked directly with customers on a real technical product. You have experience working with enterprise customers on high-impact use cases: scoping projects, managing stakeholders, and delivering outcomes in large organizations where things move slowly, people change roles, and requirements shift. You've also supported the sales side: building demos that close deals, translating a product's capabilities into a prospect's language, and making complex technical products feel tangible. You are comfortable running workshops with senior stakeholders and following up with a sharp scoping document that aligns everyone afterwards. You know how to listen for the real problem behind a feature request. You translate complex technical concepts into language non-technical stakeholders understand, and turn customer needs into concrete, buildable specifications. You understand AI deeply and know how to turn it into working systems. You can judge when an LLM-based approach is the right tool and when it isn't, and you can hold your own in technical conversations with engineering teams. You write production-quality code in JavaScript and Python, and are comfortable with HTML/CSS, APIs, and integration architectures. You can build an MCP server, design a multi-step agent workflow, or debug a customer's integration setup. Agentic coding tools are a core part of how you operate. You are fluent in English (C1+). German is a strong plus, since many of our customers are German-speaking enterprises. Bonus: you come from a technical consulting background, an AI-native company, or an early-stage startup. Experience with enterprise software, developer tools, or platform products is a plus. HOW WE WORK * 100% on-site in our Berlin office (Greifswalder Strasse 212) * Small team, high ownership - we expect everyone to manage themselves, find valuable work, and pull others in when needed * We value calm urgency: things break, we stay calm and fix them. No drama, no firefighting culture * We value ambitious execution: learning, shipping, and providing value are big drivers of happiness here * We value caring ownership: we are kind, we care about our customers and each other, and we have fun at work WHAT WE OFFER * Competitive salary with equity participation * Free lunch and dinner, every day in the office * Premium gym access (right around the corner) * Relocation support for those moving to Berlin * A front-row seat to the enterprise AI transformation - working with some of the most ambitious companies in Europe HOW TO APPLY Apply through our application form. We will ask you a few short questions - take your time with them, they matter more than your CV. Our process: Application - CV Review - Hiring Manager Interview (30 min, video) - Case Study - On-site Day (team meeting, founder interview) - Reference Call - Offer.