Platform Security Engineer (x/f/m)

<h2 class="pb-2 pt-4 heading-xl text-foreground">Set a new pulse for healthcare!</h2> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">We are looking for a <strong class="font-semibold text-foreground">Platform Security Engineer</strong> to join the <strong class="font-semibold text-foreground">Security</strong> team at Doctolib.</div> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Your mission will be to protect sensitive healthcare data while enabling rapid, secure innovation. You will be responsible for securing Doctolib's cloud infrastructure and application ecosystem, combining multi-cloud security expertise with hands-on platform engineering — contributing directly to the safety of millions of patients and care teams who rely on our platform every day.</div> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.</div> <h2 class="pb-2 pt-4 heading-xl text-foreground">What you'll do</h2> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Your responsibilities include but are not limited to:</div> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Own a platform security workstream end to end, from architecture to enforcement: scope it with your tech lead, design the control, roll it out progressively (report-only, then enforce), handle exceptions, and see it through to full coverage. Typical examples: hardening IAM across our AWS accounts, tightening cluster admission policies, or closing a class of misconfiguration for good.</li> <li class="break-words text-foreground text-base leading-relaxed">Ship every change as code: Terraform and GitHub pull requests, peer-reviewed and always reversible. No console clicking, no undocumented state.</li> <li class="break-words text-foreground text-base leading-relaxed">Harden our cloud and infrastructure baseline and keep it hardened: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls — building the guardrails and driving remediation of what they surface with platform and engineering teams, turning recurring findings into automation rather than tickets.</li> <li class="break-words text-foreground text-base leading-relaxed">Investigate and improve: lead incident investigations on the platform perimeter end to end, and continuously improve detection rules and response playbooks in our Elastic SIEM.</li> <li class="break-words text-foreground text-base leading-relaxed">Work in the open: write clear technical notes, drive adoption of your changes with the engineering teams they affect, and grow through code review and pairing with the rest of the team.</li> </ul> <h2 class="pb-2 pt-4 heading-xl text-foreground">Who you are</h2> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.</div> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground"><strong class="font-semibold text-foreground">You'll be a great fit if you:</strong></div> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Have 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure or platform engineering, including some exposure to a cloud environment (AWS, GCP or Azure) in production — an internship or apprenticeship in one of those roles counts.</li> <li class="break-words text-foreground text-base leading-relaxed">Work daily with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests, and you are comfortable operating and debugging workloads on Kubernetes.</li> <li class="break-words text-foreground text-base leading-relaxed">Use AI coding assistants (Claude or equivalent) as a normal part of how you work.</li> <li class="break-words text-foreground text-base leading-relaxed">Have carried at least one project through to production — security or not — and stayed with it past the first deployment until it was actually adopted.</li> <li class="break-words text-foreground text-base leading-relaxed">Have solid fundamentals: Linux, networking, cloud, Kubernetes and development/scripting, a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills — you can carry a proposal from draft to cross-team adoption.</li> <li class="break-words text-foreground text-base leading-relaxed">Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.</li> </ul> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground"><strong class="font-semibold text-foreground">It would be fantastic if you:</strong></div> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Have worked with a SIEM (Elastic, Splunk, or equivalent), writing and tuning your own queries.</li> <li class="break-words text-foreground text-base leading-relaxed">Have done detection engineering, incident response, threat hunting, or CTFs.</li> <li class="break-words text-foreground text-base leading-relaxed">Can point to public write-ups, open-source contributions, or a home lab.</li> <li class="break-words text-foreground text-base leading-relaxed">Have prior experience in a regulated industry (healthcare, fintech, or public sector).</li> </ul> <h2 class="pb-2 pt-4 heading-xl text-foreground">Life at Doctolib Tech</h2> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.</li> <li class="break-words text-foreground text-base leading-relaxed">Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.</li> <li class="break-words text-foreground text-base leading-relaxed">We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision&nbsp;<a class="break-all font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark" href="https://careers.doctolib.com/ai-careers/" target="_blank">here</a>.</li> </ul> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground"><em>Want to learn more about our tech culture and environment? Visit the <a class="break-all font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark" href="https://careers.doctolib.com/tech-doctolib/" target="_blank">Doctolib Tech site</a>.</em></div> <h2 class="pb-2 pt-4 heading-xl text-foreground">What we offer</h2> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Free comprehensive health insurance (basic package) for you and your children</li> <li class="break-words text-foreground text-base leading-relaxed">25 days of paid vacation per year, plus up to 14 days of RTT</li> <li class="break-words text-foreground text-base leading-relaxed">Free mental health and coaching services through our partner Moka.care</li> <li class="break-words text-foreground text-base leading-relaxed">Work from abroad for up to 10 days per year thanks to our flexibility days policy</li> <li class="break-words text-foreground text-base leading-relaxed">Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib</li> <li class="break-words text-foreground text-base leading-relaxed">A subsidy from the work council to refund part of the membership to a sport club or a creative class</li> <li class="break-words text-foreground text-base leading-relaxed">50% reimbursement of your public transport subscription</li> <li class="break-words text-foreground text-base leading-relaxed">ParentCare Program: Enjoy full salary coverage (100%) during your first month of birth leave and 75% during the second, covered by Doctolib</li> <li class="break-words text-foreground text-base leading-relaxed">Enrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth</li> <li class="break-words text-foreground text-base leading-relaxed">For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support</li> <li class="break-words text-foreground text-base leading-relaxed">Relocation support in case of international mobility</li> <li class="break-words text-foreground text-base leading-relaxed">Access to the best AI tools for coding, development and dedicated training</li> </ul> <h2 class="pb-2 pt-4 heading-xl text-foreground">Our interview process</h2> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Recruiter Interview</li> <li class="break-words text-foreground text-base leading-relaxed">Feature Building Interview</li> <li class="break-words text-foreground text-base leading-relaxed">System Design Interview</li> <li class="break-words text-foreground text-base leading-relaxed">Behavioral Interview</li> <li class="break-words text-foreground text-base leading-relaxed">At least one reference check</li> </ul> <div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">We want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our <a class="break-all font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark" href="https://careers.doctolib.com/tech-doctolib/getting-hired/" target="_blank">candidate experience page</a>.</div> <h2 class="pb-2 pt-4 heading-xl text-foreground">Job details</h2> <ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed"> <li class="break-words text-foreground text-base leading-relaxed">Permanent position</li> <li class="break-words text-foreground text-base leading-relaxed">Tech stack: Terraform, AWS, Kubernetes, Elastic SIEM</li> <li class="break-words text-foreground text-base leading-relaxed">Full-time</li> <li class="break-words text-foreground text-base leading-relaxed">Levallois-