Senior Data & AI Security Engineer, Data and Agentic Platform
Leads L'Oréal's Data & AI Security Services, securing the GCP-based global Data Platform and the Group's Agentic AI Platform. Day to day: designing security-by-design services, enforcing access governance and DLP, hardening GCP, running DR/backup planning, automating security with AI, and leading a security team across the Group.
- Compensation
- Not disclosed
- Location
- France
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 7+ years' experience in cloud security or security engineering
- At least 2 years leading a technical team
- Strong hands-on skills in GCP and Python
- Deep knowledge of GCP IAM, VPC-SC, Security Command Center, KMS/CMEK, Secret Manager, BigQuery access controls, DLP, and remediation of excessive access
- Experience designing disaster recovery, business continuity, and data leak prevention/exfiltration controls
- Strong background in Terraform, OPA/Rego policy-as-code, and CI/CD workflows
- Familiarity with Cloud Audit Logs, Google SecOps, and SIEMs
- Practical experience securing AI systems (agent auth, guardrails, MCP assessments)
- Track record of mentoring teams, prioritizing work, and driving policy adoption across business units
Nice to have
- Certifications such as GCP PCSE, CISSP, or CISM
Full description
Hello, we're L'Oreal. We're not just building brands, we're shaping how the world experiences beauty (and it takes a lot of cool jobs to do it). Intrigued? Keep reading, this might be the opportunity you've been searching for.
A Day in the Life
As part of L'Oreal’s Global Beauty Tech Data Platform team , you will lead the Data & AI Security Services . Your mission is to secure our Data Platform on Google Cloud Platform and the Group’s Agentic AI Platform , designing security-by-design services and automating them with AI, while leading the team with a strong expert posture and strategic vision across the Group’s Zones, Métiers and Divisions.
What you'll do:
- Team Leadership & Support: Lead, mentor and grow the security team; prioritize and distribute tasks and provide support to stakeholders across the organization.
- Access & Policy Governance: Design and enforce GCP access controls; detect and remediate excessive roles & access to enforce least privilege.
- Security by Design & Architecture: Embed security into the Data Platform lifecycle and Enterprise security architecture standards for solutions & services.
- Monitoring & Compliance: Operate advanced monitoring & alerting to detect compliant / non-compliant resources and drive remediation.
- Threat Protection & Data Leak Prevention: Harden GCP, respond to security events and enforce DLP controls to prevent data leaks and exfiltration.
- DRP & Resilience: Define, maintain and regularly test backups and Disaster Recovery Plans (DRP) to guarantee business continuity.
- Agentic Platform Security: Secure the Agentic AI Platform: agent access, authentication, MCP assessment and guardrails.
- Code Review & Innovation: Run rigorous code reviews, challenge designs and drive AI-driven automation and security innovation.
- Policy Enforcement: Communicate and enforce security policies & guidelines across all Zones, Métiers and Divisions of the Group.
Who you are
You are a hands-on cloud security expert and technical leader who serves as the go-to reference for the organization. You think like an attacker-proactively investigating incidents and staying ahead of threats-while keeping a clear view of enterprise architecture aligned with business goals.
You are deeply technical: you review code with rigor to raise the bar, champion security-as-code and AI-driven automation, and bring specific experience in securing AI and agentic systems.
Collaborative and direct, you easily bridge Group Cybersecurity, Zones, Métiers, and Divisions to drive security adoption at scale.