Job.boJob.bo

Offensive Security Engineer (f/m/d)

DecathlontechnologyParis, Parisarbeitnowpublished 09/19/2026
This job is no longer listed
The source has removed this listing — applying via the original link is no longer possible.
12 more positions at Decathlontechnology →
Must-have:PythonGraphQLAWSAzureGoogle CloudDockerKubernetesCloudAgileSecurity
Machine translation — original language: French.Show original

Our Cyber Defense team is looking for an Offensive Security Engineer (f/m/d) on a permanent contract (CDI) based in Lille or Paris.

About the team:

Within Decathlon Digital, our Cyber Defense team protects our global ecosystem daily to make sport sustainably accessible. Composed of passionate experts combining offensive (Red Team) and defensive (Blue Team) visions, Cybersecurity United simulates cyberattacks, detects vulnerabilities, and designs the most advanced detection rules. You will join a dynamic, agile, and collaborative team of about ten people committed to a Tech4Good approach with high international impact.

##

YOUR FUTURE CONTRIBUTION

At the heart of the technical evaluation of our resilience, you will simulate attacks to identify vulnerabilities before they are exploited, while supporting business and product teams in securing their assets:

  • Application & Network Intrusion Audits: Perform in-depth penetration tests on Web applications (OWASP Top 10), APIs (REST/GraphQL), as well as on internal infrastructures and Active Directory.
  • Cloud Audits & Infrastructure Security: Evaluate the security of our Cloud environments (AWS, GCP, Azure) and identify misconfigurations as well as privilege escalation paths.
  • Adversary Simulation (Red Teaming): Participate in Red Teaming exercises simulating real TTPs (Tactics, Techniques, and Procedures) to test our detection and response capabilities.
  • Purple Teaming & SOC Synergy: Collaborate closely with the Blue Team / SOC to validate and enrich detection rules based on your technical findings.
  • Reporting, Feedback & Inspiring Role: Write clear audit reports including risk analyses and operational recommendations for technical teams and decision-makers.

##

WHAT YOU BRING

  • Experience: At least 3-4 years of operational experience in offensive security / pentest.
  • Technical Mastery:
  • Strong skills in Web/API auditing (OWASP vulnerabilities) and Active Directory environments.
  • Knowledge of IAM mechanisms and security of Cloud services such as AWS, GCP, Azure (Lambda, S3, Cloud Run...).
  • Practice of scripting and custom tool development (Python, Go, Bash, or PowerShell).
  • A plus: Experience with C2 frameworks (Sliver, Havoc, Cobalt Strike, Adaptix), EDR/AV bypass, and Maldev, AI for Cyber uses.
  • Human & Transversal Qualities:
  • Excellent communication skills to popularize complex subjects for non-technical interlocutors (Product Owners, management).
  • Team spirit, appetite for knowledge sharing and mentoring.
  • Intellectual curiosity, continuous monitoring of new threats (CVE, CTF), and irreproachable ethical rigor.
  • Languages: Proficiency in technical English (written, read, spoken).
  • Certifications (Appreciated): OSCP, OSEP, OSED, CRTO, CRTL, or GRTP.

TECHNICAL STACK

  • Pentest / Red Team Tooling: Burp Suite Pro, C2 Frameworks (Sliver, Havoc, Adaptix), Metasploit, BloodHound.
  • Cloud & Infra Environments: AWS, GCP, Azure, Active Directory / Entra ID, Docker/Kubernetes.
  • Languages: Python, Go, Bash, PowerShell.

WHAT WE OFFER YOU

Hybrid working organization;

Equipment provided in accordance with your missions and our societal commitments (Mac or Windows);

A local project team within a global network (possibility of an international career);

Skill development and support (diversity of projects, internal and external training, etc.);

Compensation package (employee shareholding, monthly/quarterly bonuses).

OUR COMMITMENT TO INCLUSION AND ACCESSIBILITY

At Decathlon, we recognize the immense value that diversity brings to our teams and we continually strive to foster and cultivate an inclusive and equitable workplace: that is why Inclusion is one of our Human Fundamentals. We encourage people from all backgrounds and abilities to apply, because we are convinced that diversity of thought, culture, identity, and lived experience makes us stronger.

Decathlon is also committed to offering an inclusive and accessible selection process to all candidates. If you require accommodations, you can request them via the application form; this request will be confidential. These requests do not affect the outcome of the recruitment process.

DECATHLON DIGITAL

Imagine if technology allowed us to push boundaries and offer unprecedented sporting experiences. That is precisely our ambition at Decathlon Digital! We are a team of more than 5,000 experts in software engineering, product management, data, cloud, and cybersecurity, spread across Paris, Lille, and Amsterdam. Together, we are creating the largest digital sports platform, leveraging technological innovations to optimize the value chain, design connected experiences, and give a second life to our products.

Let's change the game for good. Our passion for sport guides us and we want it to endure. That is why we are committed to building a more sustainable technological model, by reducing our direct impact on the environment, and by creating a safe and inclusive space to learn and thrive together. Join the team and let's shape the future of sport.

Find more English Speaking Jobs in France on Arbeitnow