Platform Security Engineer (x/f/m)

heading-xl text-foreground Set a new pulse for healthcare!

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground We are looking for a strong text-foreground Platform Security Engineer to join the strong text-foreground Security team at Doctolib.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground Your mission will be to protect sensitive healthcare data while enabling rapid, secure innovation. You will be responsible for securing Doctolib s cloud infrastructure and application ecosystem, combining multi-cloud security expertise with hands-on platform engineering, contributing directly to the safety of millions of patients and care teams who rely on our platform every day.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.

heading-xl text-foreground What you ll do

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground Your responsibilities include but are not limited to:

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Own a platform security workstream end to end, from architecture to enforcement: scope it with your tech lead, design the control, roll it out progressively (report-only, then enforce), handle exceptions, and see it through to full coverage. Typical examples: hardening IAM across our AWS accounts, tightening cluster admission policies, or closing a class of misconfiguration for good.
text-foreground text-base leading-relaxed Ship every change as code: Terraform and GitHub pull requests, peer-reviewed and always reversible. No console clicking, no undocumented state.
text-foreground text-base leading-relaxed Harden our cloud and infrastructure baseline and keep it hardened: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls, building the guardrails and driving remediation of what they surface with platform and engineering teams, turning recurring findings into automation rather than tickets.
text-foreground text-base leading-relaxed Investigate and improve: lead incident investigations on the platform perimeter end to end, and continuously improve detection rules and response playbooks in our Elastic SIEM.
text-foreground text-base leading-relaxed Work in the open: write clear technical notes, drive adoption of your changes with the engineering teams they affect, and grow through code review and pairing with the rest of the team.

heading-xl text-foreground Who you are

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground Before you read on: if you don t have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground strong text-foreground You ll be a great fit if you:

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Have 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure or platform engineering, including some exposure to a cloud environment (AWS, GCP or Azure) in production, an internship or apprenticeship in one of those roles counts.
text-foreground text-base leading-relaxed Work daily with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests, and you are comfortable operating and debugging workloads on Kubernetes.
text-foreground text-base leading-relaxed Use AI coding assistants (Claude or equivalent) as a normal part of how you work.
text-foreground text-base leading-relaxed Have carried at least one project through to production, security or not, and stayed with it past the first deployment until it was actually adopted.
text-foreground text-base leading-relaxed Have solid fundamentals: Linux, networking, cloud, Kubernetes and development/scripting, a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills, you can carry a proposal from draft to cross-team adoption.
text-foreground text-base leading-relaxed Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground strong text-foreground It would be fantastic if you:

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Have worked with a SIEM (Elastic, Splunk, or equivalent), writing and tuning your own queries.
text-foreground text-base leading-relaxed Have done detection engineering, incident response, threat hunting, or CTFs.
text-foreground text-base leading-relaxed Can point to public write-ups, open-source contributions, or a home lab.
text-foreground text-base leading-relaxed Have prior experience in a regulated industry (healthcare, fintech, or public sector).

heading-xl text-foreground Life at Doctolib Tech

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.
text-foreground text-base leading-relaxed Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.
text-foreground text-base leading-relaxed We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision a font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark here.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground Want to learn more about our tech culture and environment? Visit the a font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark Doctolib Tech site.

heading-xl text-foreground What we offer

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Free comprehensive health insurance (basic package) for you and your children
text-foreground text-base leading-relaxed 25 days of paid vacation per year, plus up to 14 days of RTT
text-foreground text-base leading-relaxed Free mental health and coaching services through our partner Moka.care
text-foreground text-base leading-relaxed Work from abroad for up to 10 days per year thanks to our flexibility days policy
text-foreground text-base leading-relaxed Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib
text-foreground text-base leading-relaxed A subsidy from the work council to refund part of the membership to a sport club or a creative class
text-foreground text-base leading-relaxed 50% reimbursement of your public transport subscription
text-foreground text-base leading-relaxed ParentCare Program: Enjoy full salary coverage (100%) during your first month of birth leave and 75% during the second, covered by Doctolib
text-foreground text-base leading-relaxed Enrollment in Doctolib s long-term employee value sharing plan called DoctoGrowth
text-foreground text-base leading-relaxed For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support
text-foreground text-base leading-relaxed Relocation support in case of international mobility
text-foreground text-base leading-relaxed Access to the best AI tools for coding, development and dedicated training

heading-xl text-foreground Our interview process

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Recruiter Interview
text-foreground text-base leading-relaxed Feature Building Interview
text-foreground text-base leading-relaxed System Design Interview
text-foreground text-base leading-relaxed Behavioral Interview
text-foreground text-base leading-relaxed At least one reference check

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground We want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our a font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark candidate experience page.

heading-xl text-foreground Job details

-col gap-1 text-foreground text-base leading-relaxed text-foreground text-base leading-relaxed Permanent position
text-foreground text-base leading-relaxed Tech stack: Terraform, AWS, Kubernetes, Elastic SIEM
text-foreground text-base leading-relaxed Full-time
text-foreground text-base leading-relaxed Levallois-Perret, France
text-foreground text-base leading-relaxed Hybrid work setup (up to 2 remote days per week)
text-foreground text-base leading-relaxed Start date: as soon as possible

heading-xl text-foreground We welcome everyone

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground At Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground To ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process.

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground Join us in building the healthcare we all dream of!

heading-xl text-foreground Your data privacy

font-normal first: last: @md: @md:leading-relaxed text-base leading-relaxed text-foreground All information provided is processed by Doctolib for application management. For data processing details, click here: a font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark France. Please contact.dataprivacy(at)doctolib.com for inquiries or to exercise your rights.