{"id":66014,"url":"https://alion.io/job/doctolib-senior-corporate-security-engineer-it-security-xfm","title":"Senior Corporate Security Engineer - IT Security (x/f/m)","company":{"id":52886,"name":"Doctolib","domain":"doctolib.fr","url":"https://alion.io/company/doctolib","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":82,"open_postings":63,"ghost_share":0.016,"stale_share":0.635,"repost_share":0.048,"time_to_fill_p50_days":34,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":104000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":57},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Claude","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"GitHub","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Cloudflare","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Google Workspace","optional":true},{"name":"Java","optional":true},{"name":"JavaScript","optional":true},{"name":"Kotlin","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Python","optional":true},{"name":"React Native","optional":true},{"name":"React.js","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-06-03T09:55:51Z","employer_posted_date":"2026-06-03","last_verified_at":"2026-11-06T04:25:55Z","board_verified":true,"closed_at":null,"days_open":155,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":154},"description":"Set a new pulse for healthcare!\nWe are looking for a Senior Corporate Security Engineer to join the Corporate Security team in SecOps.\nYour mission will be to secure everything Doctolibers rely on to do their best work identities, endpoints, SaaS applications, and the zero-trust network that connects them in a highly regulated healthcare environment (HDS, ISO 27001, C5) where security directly impacts patient safety and trust. You will own security programs end-to-end, shipping every control as code and driving adoption across teams, contributing directly to the protection of data for over 80 million patients and 400,000 health professionals.\nWorking in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.\nWhat you'll do\nYour responsibilities include but are not limited to:\nOwn corporate security programs from architecture to enforcement: conditional access, phishing-resistant authentication, device compliance, SaaS and third-party app governance (including AI tools), and zero-trust network access.\n\nShip every change as code: use Terraform and GitHub pull requests to bring controls to production designed, peer-reviewed, rolled out progressively (report-only → enforce), and always reversible.\n\nDrive adoption across teams: write technical proposals, align IT and business stakeholders, plan communications and exception handling, and land security controls without disrupting how people work.\n\nEvaluate and secure the tools Doctolibers adopt: conduct security reviews of SaaS integrations and AI tools, and deliver pragmatic, risk-based responses to shadow IT.\n\nInvestigate and improve: lead incident investigations on the corporate perimeter end-to-end, and continuously improve detection rules and response playbooks in our Elastic SIEM.\n\nMentor more junior engineers and contribute to a team culture of engineering excellence and peer review.\n\nWho you are\nBefore you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.\nYou'll be a great fit if you:\nHave 5+ years of hands-on experience securing corporate/enterprise environments - identity, endpoints, SaaS, and network - including at least 2 years at a senior level. You have built and enforced security controls in production (not only monitored alerts), and owned at least one significant program end-to-end, such as an MFA rollout, a device-compliance initiative, or a SaaS access-governance project.\n\nHave strong daily mastery of GitHub, Terraform, and AI coding assistants (Claude or equivalent). You ship security work as reviewed pull requests and use AI agents as a structural part of your workflow, not an occasional helper.\n\nHave deep identity & access expertise: identity providers, conditional access policies, OAuth/application governance, and modern authentication standards (passkeys, phishing-resistant MFA).\n\nHave a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills - you can carry a proposal from draft to cross-team adoption.\n\nAre fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.\n\nIt would be fantastic if you:\nHave detection engineering or SIEM experience (writing and tuning your own queries).\n\nAre curious about platform security topics (cloud, Kubernetes, supply chain) and willing to contribute beyond your core perimeter.\n\nHave prior experience in a regulated industry (healthcare, fintech, or public sector).\n\nLife at Doctolib Tech\nOur solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.\n\nOur stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.\n\nWe leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here.\n\nWant to learn more about our tech culture and environment? Visit the Doctolib Tech site.\nWhat we offer\nFree comprehensive health insurance (basic package) for you and your children\n\n25 days of paid vacation per year, plus up to 14 days of RTT\n\nFree mental health and coaching services through our partner Moka.care\n\nWork from abroad for up to 10 days per year thanks to our flexibility days policy\n\nLunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib\n\nA subsidy from the work council to refund part of the membership to a sport club or a creative class\n\n50% reimbursement of your public transport subscription\n\nParent Care Program: receive one additional month of leave on top of the legal parental leave\n\nEnrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth\n\nFor caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support\n\nRelocation support in case of international mobility\n\nAccess to the best AI tools for coding, development and dedicated training\n\nOur interview process\nTA Screening\n\nTechnical Assessment (~90 min, live): security questions followed by a hands-on scenario worked through together - with an AI assistant available directly in the platform, the way we actually work\n\nBehavioral Interview\n\nAt least one reference check\n\nWe want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our candidate experience page.\nJob details\nPermanent position\n\nTech stack: Terraform, GitHub, Entra ID, Intune, CrowdStrike, Cloudflare, Elastic, Google Workspace\n\nFull-time\n\nParis, France\n\nHybrid work setup (up to 2 remote days per week)\n\nStart date: as soon as possible\n\nWe welcome everyone\nAt Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination.\nThe more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability.\nTo ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process.\nJoin us in building the healthcare we all dream of!\nYour data privacy\nAll information provided is processed by Doctolib for application management. For data processing details, click here: France. Please contact hr.dataprivacy(at)doctolib.com for inquiries or to exercise your rights.","description_format":"text","description_chars":6858,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false},{"language":"French","level":"All levels","optional":false}]},"benefits":["Health insurance","Hybrid work","Parental leave"],"hiring_locations":[{"name":"France","iso":"FR","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Practice Management Software","Patient Access & Booking"],"lifecycle":[{"event":"open","at":"2026-06-03T09:55:51Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.341,"p_room":0.28,"age_days":154,"expected_fill_days":34,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/doctolib-senior-corporate-security-engineer-it-security-xfm","json_url":"https://alion.io/job/doctolib-senior-corporate-security-engineer-it-security-xfm.json","meta":{"generated_at":"2026-11-06T05:14:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9124,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52886},"rest":"https://alion.io/mcp/rest/get_company?id=52886"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdoctolib-senior-corporate-security-engineer-it-security-xfm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdoctolib-senior-corporate-security-engineer-it-security-xfm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdoctolib-senior-corporate-security-engineer-it-security-xfm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/doctolib-senior-corporate-security-engineer-it-security-xfm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdoctolib-senior-corporate-security-engineer-it-security-xfm"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":66014}},{"tool":"search_jobs","arguments":{"company":"doctolib.fr","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":66014},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}