IT Security Engineer (x/f/m)
- Compensation
- Not disclosed
- Location
- Palaiseau, FR
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Nice to have
- Soft Skills
- • Collaborative team player able to build strong relationships with technical, operational, and business stakeholders
- • Clear communicator able to influence decisions and adapt messages to both technical and non-technical audiences
- • Strong sense of ownership and autonomy, with sound judgment on when to coordinate or escalate decisions to the ISM and other relevant stakeholders
- • Rigorous, pragmatic, and solution-oriented approach
Full description
About Pasqal
PASQAL designs and develops Quantum Processing Units (QPUs) and associated software tools.
Our innovative technology enables us to address use cases that are currently beyond the reach of the most powerful supercomputers; these cases can concern industrial application challenges as well as fundamental science needs.
In addition to the exceptional computing power they provide, QPUs are highly energy efficient and will contribute to a significant reduction in the carbon footprint of the HPC industry.
Job description
As a Senior IT Security Engineer, you will join PASQAL’s IT team to design, operate, and continuously improve security across workplace, identity, networks, SaaS, infrastructure, and cloud environments. Working closely with the Information Security Manager, you will turn security requirements and risks into pragmatic solutions that support business needs.
Your main responsibilities will be to:
- Strengthen identity, endpoint, network, and cloud security through access controls, hardening, segmentation, monitoring, and vulnerability management.
- Deploy and operate protection and detection capabilities such as EDR/XDR, SIEM, IDS/IPS, logging, and alerting, while managing security incidents and remediation.
- Automate and standardize security controls using Python/Bash, Terraform, Ansible, Infrastructure as Code, and DevSecOps practices across IT and CI/CD environments.
- Support ISO/IEC 27001 certification by maintaining auditable technical controls and evidence, contributing to audits, and collaborating with IT, Engineering, Legal, HR, Procurement, and other teams to embed security by design.
About you
- 5–7 years of hands-on experience in cybersecurity, IT security, or a closely related infrastructure engineering role
- Strong foundations in IAM, endpoint security, system hardening, vulnerability management, security monitoring, audit logging, and incident response
- Hands-on experience with identity technologies such as SSO, SAML, OIDC, SCIM, MFA, and RBAC
- Solid understanding of application and DevSecOps security practices, including CI/CD security, vulnerability scanning, threat modeling, and software supply-chain security
- Ability to translate risks and security requirements into pragmatic technical controls and propose secure alternatives without unnecessarily blocking operations or research
- Ability to document controls, decisions, and technical activities so they remain measurable, traceable, and auditable