SECURITY ARCHITECT (F/H (F/H)

Type of contract : CDD 36 months renewable Salary : Between 70 and 80K depending on qualificationss Location : Lyon Direct Report to CTO

Your role As a Security Architect, you will act as the leading authority on security architecture, reporting to the Chief Technology Officer (CTO). You will be responsible for defining, governing and developing the security architecture strategy to ensure that ICT systems are secure, resilient and compliant. Your key responsibilities centre on the following areas: - Security Design Authority: Translating security requirements into scalable architectural models (Zero Trust NIST 800-207, NIST CSF, ISO 27001, CIS Controls v8) for cloud, hybrid and on-premises environments. - Governance & Integration: Define reference architectures and validate technical and integration designs within the architecture committee. - DevSecOps & SSDLC: Manage and improve the secure software development lifecycle (NIST SSDF, OWASP SAMM, BSIMM). Design and implement automated CI/CD pipelines and integrate security tools (SAST, DAST, SCA, IaC analysis, secret detection). - Cloud & API Security: Implement cloud-native security controls (CIS benchmarks, NIST 800-53/190, MITRE ATT&CK). Secure APIs (REST, GraphQL, OAuth 2.0/OIDC) and the software supply chain (SBOM generation and validation, artefact signing). - Supporting teams: Facilitate threat modelling workshops (STRIDE, PASTA) and provide methodological guides (playbooks) to developers. English: Fluency is essential, both written and spoken.Second language: Proficiency in French, Spanish or Arabic is an asset.

Profil

Bachelor's degree (BAC+3/4) or equivalent in Computer Science or Information Security.Experience : At least 5 years' experience working in complex IT environments, including a minimum of 5 years as a Security Architect. DevSecOps experience: Proven experience of integrating DevSecOps into enterprise CI/CD pipelines and public/private cloud environments. Certifications (preferred): CISSP, SABSA, CISM, CRISC, CCSP, CKS, CSSLP or equivalent. Personal qualities & mindset Technical expertise & passion: Strong technological background, focused on innovation and accelerating progress in the field of AI. Pragmatism: Awareness of the challenges associated with existing (legacy) systems, requiring a thoughtful and structured approach. Motivation & Purpose: A deep commitment to values and mission to make a tangible impact on global security. Interpersonal skills: Ability to collaborate effectively and mentor within international and multicultural teams.