Security Engineer - Tech Lead (f/m/d) H/F

Our Cybersecurity Team is looking for a Tech Lead Engineer based in Lille or Paris

The Decathlon Cybersecurity team ensures the protection and security of the entire group: it drives the governance strategy and risk management processes, ensures the compliance of our information systems, defines the technical means necessary for incident detection and response, as well as the associated control measures.

Information Security is a key pillar for Decathlon. Protecting the data of our customers, our employees, and our brand image is our priority. With the help of a security governance structure initiated 4 years ago, we want to accelerate certain projects to support our digital transformation.

In this capacity, we are looking for our next Application Security Engineer, integrated into our Security Engineering team. The team's mission is to secure the application lifecycle, from code (SAST / SCA) to Cloud (CNAPP / CSPM / CWPP), up to its exposure on the internet (WAF / External Exposure) by helping to define governance, improving existing processes, and implementing the necessary tools.

YOUR FUTURE CONTRIBUTION

As a Tech Lead, you will be the engine of the team and a technical reference. Your main responsibilities will be:

• Challenging the team: questioning the technical choices of the Security Engineering team and contributing with them to the implementation of strategic initiatives
• Team leadership and strategy: leading the team on a daily basis, defining priorities and allocating resources, in connection with the overall company strategy and the cyber roadmap
• Project management (RUN and BUILD): tracking tickets and projects via Jira, ensuring the progress of strategic initiatives (BUILD) and ensuring the proper execution of operational activities (RUN)
• Sharing and communication: documenting and sharing security best practices, and being the reference for other teams
• Strategic contribution: participating in a range of broader cyber initiatives, beyond application security, notably Cloud security and the management of assets exposed on the internet

TECHNICAL STACK

• Public Cloud: AWS / GCP
• CI/CD: GitHub
• Security tooling - code: Snyk (SAST / SCA) and Wiz Code (PoC)
• Security tooling - cloud: CNAPP (Wiz)
• Security tooling - exposure management: Cloudflare / Wiz
• Infrastructure as Code: Terraform
• API Management
• Authentication and authorization protocols: SAML, OAuth2.0, OIDC, .
• Collaboration tools: Slack, Google Workspace, Confluence, Jira

WHAT YOU BRING

• Solid experience in software development, security (SAST/SCA), SDLC, CI/CD pipelines, containers, and Cloud environments (AWS, GCP). Mastery of authentication protocols (OAuth2/OIDC) and API management.
• Experience in team leadership, work organization (Jira), and defining a technical strategy. Results-oriented with a pragmatic approach centered on risk management.
• Excellent communication and collaboration skills, complex problem-solving, ability to code and fix code, and to popularize technical concepts.
• Proficiency in English to collaborate effectively with international teams.

WHAT WE OFFER YOU

• 2 days of remote work per week;
• Possibility to work in one of the Decathlon Digital offices in Lille or Paris;
• Equipment provided in accordance with your missions and our societal commitments (Mac, Windows, or Chromebooks);
• A local project team within a global network (possibility of an international career);
• Skill development and support (diversity of projects, technical certifications from the first year, internal and external training, etc.);
• Compensation package (employee participation in company shares, monthly/quarterly bonuses).