{"id":163411,"url":"https://alion.io/job/mistral-ai-cybersecurity-product-security-engineer","title":"CyberSecurity, Product Security Engineer","company":{"id":22,"name":"Mistral AI","domain":"mistral.ai","url":"https://alion.io/company/mistral-ai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":208,"ghost_share":0,"stale_share":0.005,"repost_share":0,"time_to_fill_p50_days":64,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":106000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":47},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CWE","optional":false},{"name":"Go","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-07-21T09:00:20Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-10-20T20:23:17Z","board_verified":true,"closed_at":null,"days_open":91,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":90},"description":"About Mistral\nMistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.\nWe are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.\nRole summary\nAs a Product Security Engineer within the Cybersecurity organization, you will be the dedicated security partner for one or more product organizations (such as Vibe, Studio or Forge).\nYou will work alongside engineers, researchers and product managers to ensure security is built into every stage of the product lifecycle-from early design and architecture decisions through implementation, production deployment and continuous evolution.\nYour mission is to help engineering teams build secure products without slowing them down. Rather than acting as a gatekeeper, you will enable teams to make sound security decisions through secure-by-design principles, pragmatic engineering guidance and scalable security automation.\nYou will own the Product Security strategy for your product portfolio, influence engineering decisions, and help define how secure software is built across one of the world's leading AI companies.\nWhat you will do\nServe as the dedicated Product Security partner for one or more product organizations.\n\nDrive security throughout the entire product lifecycle, from design and architecture reviews to production deployment and ongoing operation.\n\nLead threat modeling, security architecture reviews and risk assessments for new features, APIs and major architectural changes.\n\nDefine pragmatic security requirements and secure-by-default patterns that enable engineering teams to ship safely at high velocity for a specific product.\n\nReview critical designs and code, focusing on authentication, authorization, tenant isolation, data protection, cryptography and other high-impact security controls.\n\nDesign product-specific security validation strategies, including targeted testing, abuse-case development and guided agent-based security assessments tailored to each product's architecture and workflows.\n\nPartner with engineering teams to prioritize and remediate vulnerabilities identified through code reviews, penetration testing, bug bounty programs and automated security testing.\n\nCollaborate with Security Engineering to improve reusable security platforms, developer guardrails and security capabilities integrated into the SDLC.\n\nChampion secure software engineering through coaching, technical leadership, reusable design patterns and Security Champion programs.\n\nDefine Product Security metrics, continuously improve the security posture of your products and help shape Product Security practices across the company.\n\nWhat we're looking for:\n5+ years of experience in Product Security, Application Security or Software Engineering with a strong security focus.\n\nStrong understanding of modern software architecture, distributed systems, APIs and cloud-native applications.\n\nDemonstrated experience performing threat modeling, architecture reviews and secure design assessments.\n\nDeep understanding of modern software security, including authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows and common vulnerability classes (OWASP Top 10, CWE).\n\nStrong software engineering skills in Python, Go, TypeScript or similar languages, with the ability to review production code and build security automation.\n\nExperience with application security testing techniques, including manual code review, penetration testing, bug bounty programs.\n\nExperience designing product-specific security testing approaches, including security automation or agent-based testing, is highly valued.\n\nStrong understanding of Secure SDLC principles from product design through production deployment and long-term maintenance.\n\nExcellent communication and influencing skills, with the ability to earn trust across engineering organizations and balance security, product delivery and developer experience.\n\nA pragmatic, engineering-first mindset with strong technical judgment and a focus on solving meaningful security problems.\n\nWhat We Offer\nWe offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.\nFor the most up-to-date details on benefits available in your location, please refer to our Benefits page.\nPrivacy Policy\nYour privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.","description_format":"text","description_chars":5140,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Retirement plans","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","Information Security","Code Intelligence","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-07-21T09:00:20Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.722,"p_room":0.44,"age_days":90,"expected_fill_days":64,"reasons":["conf:2","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/mistral-ai-cybersecurity-product-security-engineer","json_url":"https://alion.io/job/mistral-ai-cybersecurity-product-security-engineer.json","meta":{"generated_at":"2026-10-20T21:55:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25509,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":22},"rest":"https://alion.io/mcp/rest/get_company?id=22"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmistral-ai-cybersecurity-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmistral-ai-cybersecurity-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmistral-ai-cybersecurity-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mistral-ai-cybersecurity-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmistral-ai-cybersecurity-product-security-engineer"}]}