DevSecOps Security Engineer (M/F/X) (1 year extendable)

METALINE is an IT services company specializing in outsourcing, managed services, Data Centers, and the Digital Workplace.

Founded with the ambition of supporting companies in managing and optimizing their IT infrastructures, METALINE has evolved to meet the technological challenges of today and tomorrow. As part of our growth and to meet the specific needs of one of our clients, we are looking for an AI Vulnerability Remediation Engineer / DevSecOps Security Engineer (M/X/F) for a strategic mission.

If you want to evolve in a dynamic environment and take on stimulating challenges within a committed team, this mission is for you!

Main Missions

As part of strengthening its application security and industrializing its cybersecurity processes, our client is looking for an AI Vulnerability Remediation Engineer / DevSecOps Security Engineer.

You will work on an innovative program aimed at automating vulnerability remediation using artificial intelligence. Your role will consist of designing and implementing processing chains that allow for the automatic identification, correction, testing, and integration of security patches within DevSecOps pipelines.

This mission is intended for an experienced profile, passionate about cybersecurity, automation, and new artificial intelligence technologies applied to secure development.

• Analyze, qualify, and prioritize vulnerabilities identified by security tools.
• Drive remediation plans and ensure compliance with correction SLAs.
• Leverage artificial intelligence solutions to generate code, configuration, or dependency patches.
• Verify, test, and validate produced patches before production deployment.
• Design and industrialize automated remediation workflows integrating:
• Vulnerability detection;
• Patch generation;
• Automated test execution;
• Validation and review;
• Deployment in target environments.
• Integrate security mechanisms into existing CI/CD pipelines.
• Define governance rules and safeguards related to the use of AI in development processes.
• Produce dashboards, performance indicators, and security reporting.
• Collaborate with Security, Development, Architecture, Cloud, and Operations teams.
• Regularly present progress, risks, and results to various stakeholders.

Profile Sought

Technical Skills

• Very good knowledge of SAST, DAST, and SCA tools.
• Mastery of OWASP and CVE frameworks, vulnerable dependency management, and secrets management.
• Solid experience with CI/CD environments and their securing.
• Good level in development and scripting (Python, JavaScript, Shell, or equivalent).
• Fluent professional English.

Soft Skills and Interpersonal Skills

• Excellent analytical and complex problem-solving skills
• Automation and continuous improvement mindset
• Strong awareness of cybersecurity issues
• Ability to challenge and optimize existing processes

Experience and Training

• Concrete experience using artificial intelligence in development assistance or code correction.
• Significant experience in DevSecOps and application security.
• Expertise in vulnerability management and remediation.

Recruitment Process

• First telephone exchange with a Metaline Recruitment Manager
• A Technical Interview
• Meeting with the client