DevSecOps et Responsable Sécurité Produit (IT) / Freelance

Job summary

The role involves ensuring product security and compliance within a company specializing in connected technological solutions for public spaces.

Qualifications

• Proven experience in securing industrial equipment or connected devices under embedded Linux.
• Mastery of software inventory formats (CycloneDX, SPDX).
• Proficiency in continuous integration tools (e.g., GitLab CI, Jenkins).
• Expertise in static and dynamic analysis tools (SAST/DAST/SCA).
• Ability to read and analyze code written in C++ and Python.

Responsibilities

• Evaluate attack surfaces and conduct targeted risk analyses on products.
• Structure and lead compliance alignment with CRA requirements.
• Generate and maintain software bill of materials (SBOM).
• Establish applicable security standards for products.
• Qualify identified vulnerabilities.
• Deploy and optimize CI/CD pipelines.
• Automate compilation, testing, assembly, and deployment phases.
• Integrate automated control tools into the integration chain.
• Educate and train development, innovation, and validation teams on security best practices.

Skills

Relocation