DevOps Cybersecurity Engineer

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates. ABOUT THE ROLE: We are seeking a skilled Azure Security Engineer to design, implement, and maintain robust security controls across our Azure Gov Cloud environment (including hybrid and multi-cloud scenarios). In this hands-on role, you will build, strengthen, and maintain our cloud security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle. You will develop, implement, and leverage Microsoft’s native security tools to detect threats, respond to incidents, and ensure alignment with industry standards and regulations. Lastly, you will be required to both achieve and maintain compliance with government regulations such as FedRAMP and CMMC.  RESPONSIBILITIES: * Implement, design, and manage security architecture for Azure Government and Commercial deployments (with considerations for DoD IL5\IL6 and FedRAMP High controls) * Configure and optimize Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, and related services for threat detection, vulnerability management, and automated response   * Design and enforce identity & access management using Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policies, RBAC, and just-in-time access   * Secure network architectures with Azure Firewall, Network Security Groups (NSGs), DDoS Protection, Web Application Firewall (WAF), Network Watcher, and private endpoints   * Protect data at rest and in transit via Azure Key Vault, encryption strategies, data classification, and information protection controls   * Develop and maintain security policies, initiatives, and blueprints using Azure Policy and Microsoft Purview for compliance (NIST, FedRAMP, CMMC, STIGs, etc.)   * Perform threat hunting, incident response, and forensics using Sentinel playbooks, Log Analytics, and KQL queries   * Conduct security reviews of Infrastructure as Code (IaC), containers, Kubernetes (AKS), and serverless workloads   * Collaborate with developers and architects to implement DevSecOps practices, including secure CI/CD pipelines, code scanning, and secure defaults   * Monitor and remediate security findings, reduce attack surface, and improve overall security posture per the Microsoft Cloud Security Benchmark (MCSB)  * Deploy configurations and compliance policies to Azure AVD endpoints using Intune and other Azure native services.  BASIC QUALIFICATIONS: * Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one.  * 3+ years of experience in cloud security, cybersecurity engineering, or related roles (with strong Azure focus)   * Deep hands-on expertise with core Azure security services: Microsoft Defender suite, Sentinel, Intune, Entra ID, Key Vault, Azure Policy, Firewall, Network Watcher, and Purview   * Strong understanding of DLP implementation both in cloud and on endpoints utilizing Purview and other Microsoft native controls * Experience implementing security in hybrid/multi-cloud environments   * Proficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform)   * Strong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability management   * Familiarity with compliance frameworks (NIST, FedRAMP, CMMC, STIGs, etc.) and regulatory requirements   * Excellent problem-solving, analytical, and communication skills * Strong verbal and written communication skills and the ability to stay composed under pressure. PREFERRED SKILLS AND EXPERIENCE: * Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect (SC-100) * Additional relevant certifications (e.g., CISSP, CCSP, Microsoft Certified: Azure Administrator, AWS Security Specialty, SANS GCPS, SANS GCAD)   * Deep experience with detection and response engineering and SOC operations * Knowledge of container security (Docker, AKS), secure DevOps, or AI/ML workload protection   * Prior experience in government regulations frameworks such as FedRAMP and CMMC.  COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: * To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

LIVE THE MUSIC WITH US From a pioneer tech start-up created in 2007, Deezer has become one of the first French unicorns and the second largest independent music streaming platform in the world. At eighteen years old, we’re only just coming of age. Now listed on #EuroNext, Deezer is a rapidly-growing, cutting-edge player in the music streaming market. If you want an environment where you can make your voice heard and be at the forefront of music and tech, look no further! We believe music is all about embracing the things that make us different. Deezer is a vibrant community that celebrates uniqueness, diversity and individuality, and thrives on collaboration. Our international and passionate teams pride themselves on being at the forefront of the music experience, going beyond streaming and helping the world to Live the Music. We’re constantly evolving alongside our customers, partners, artists and employees — striving to make Deezer the most personal and innovative streaming service in the world. Ready for an electrifying journey? Apply now and do your part in bringing extraordinary music experiences to people’s lives! **Join Us** JOB DESCRIPTION Position based in Paris As a Senior Expert Platform Engineer in the DevXP team, you will shape our Internal Developer Platform (IDP). You will drive platform strategy, architecture, and execution to help engineers ship faster, safer, and with higher quality. A key part of your role will be to actively collect needs and best practices from engineering teams, turning those insights into relevant, well-grounded platform solutions. You will set engineering standards along with senior engineers from the whole company, mentor peers, and bridge platform engineering with AI and cybersecurity. Responsibilities * Platform Engineering - Architect and evolve the IDP, CI/CD pipelines, and automation frameworks. Own the long-term technical vision, define platform standards (IaC, GitOps), and select best-in-class tooling across build, deployment, monitoring, and security. * Developer Experience - Proactively identify and eliminate friction across the software lifecycle. Track DX metrics (DORA, SPACE) and use data to prioritize platform investments. Be the internal advocate for developers. * AI-Augmented Platform - Integrate AI capabilities into the platform (intelligent code review, anomaly detection, smart test generation). Evaluate and operationalize AI tools (GitHub Copilot, LLM-based assistants) and explore agentic automation to reduce developer toil. * Security & Compliance - Embed security-by-design into every platform layer: secure CI/CD (SAST, DAST, SCA, secret scanning), supply chain integrity (SLSA, SBOM), and least-privilege access. Lead our journey toward a DevSecOps culture, building the practices, automation, and mindset that will make security a first-class citizen across all engineering teams - an ambition we are actively working toward. * Reliability & Observability - Define SLOs/SLAs for platform services, ensure full-stack observability, lead incident response, and conduct blameless post-mortems. * Cross-functional Leadership - Collaborate with Engineering, SRE, Infrastructure, and Security teams. Mentor engineers, represent DevXP in architectural forums, and communicate technical trade-offs to diverse audiences. QUALIFICATIONS Qualifications * Degree in Computer Science or equivalent. * 8+ years in platform engineering or DevOps, with 3+ years at senior/expert level. * Track record of operating platforms at scale; fluency with TDD, trunk-based development, and continuous delivery. Required Skills * Platform & DevOps - CI/CD (GitHub Actions), GitOps, IaC (Terraform), Kubernetes, Docker, ArgoCD, GCP (GKE) * Observability - Prometheus, Grafana; SLO/SLI/error budget management. * AI & Automation - Hands-on integration of AI tools in engineering workflows; MLOps familiarity. * Leadership - Technical influence without direct authority, mentoring, strong communication. Nice to Have Skills * Platform & DevOps - Jenkins, Ansible, Cloud Run), testing strategies, Python/Go/Bash. * Observability - OpenTelemetry * Security - DevSecOps pipelines, SAST/DAST/SCA, SBOM, SLSA, policy-as-code (OPA, Kyverno), zero-trust principles. At Deezer, diversity drives innovation. Whatever makes you uniquely you, your experiences, your way of thinking, your journey, might be exactly what we need. If this role speaks to you and aligns with your interests and capabilities, even if you don’t meet 100% of the qualifications listed, please give it a try and tell us more! #BeYou ADDITIONAL INFORMATION At Deezer, you can be your true self as we believe that #everyvoicematters. We strive to build an inclusive culture and foster a diverse environment. Because we care and want to ensure each employee feels welcome and safe at work, we continuously focus on fighting biases and helping diverse teams work well together through multiple learning opportunities, e-learnings and workshops right from the onboarding : * Regular Diversity & Inclusion internal and external talks * Dedicated employee work streams on Gender equity, Ethnicity & Culture, Disability, Parenthood (signatory of the Parental Challenge) and LGBTQIA+ * Multiple e-learnings and mandatory training sessions for all managers * English and French courses for all, so that everyone can connect and feel included Beyond benefits like transportation, we offer you extra perks like: * A Deezer premium family account for free * Access to gym classes * Join over 70 Deezer Communities to connect beyond your day-to-day work, share passions, learn from each other and #Belong * Deezer parties several times a year and drinks every thursday * Allowance for sports, travelling and culture * Meal vouchers * Mental health and well-being support from Moka.Care * Great offices always located in dynamic and attractive districts, whether in Paris, London or Sao Paulo! * Hybrid remote work policy If you want to learn more about life and culture at Deezer, please visit our Welcome to the Jungle page here!