DevSecOps
Wakam
Paris
Who are we? Wakam is a B2B2C insurance company that creates white-label insurance solutions via its Play&Plug® technology platform for more than 80 partners. We provide most of our insurance products through API, and hosts white label insurance solutions via our Play&Plug technology platform. With a footprint spanning 32 countries and revenue of more than €900 million in 2023, mostly generated outside France, Wakam is the European leader in digital and embedded insurance. Strongly committed to social responsibility, Wakam is a mission-driven company dedicated to "enabling transparent and impactful insurance".
About the Team Join the Digital Office at Wakam and help revolutionize the insurance industry through innovation and technology. We are a center of expertise where cutting-edge tools meet strategic thinking. Our teams design, develop, and optimize robust digital solutions that improve efficiency and user experience - all within an Agile, collaborative, and fast-paced environment.
Your Mission As DevSecOps , you'll be responsible for leading and implementing a DevSecOps approach across all teams involved in building and maintaining Wakam's digital assets. Your mission will be to raise security maturity levels across the organisation, prioritising initiatives based on risk.
Key Responsibilities
Strategy & Assessment
• True remote work flexibility with our Wakam From Anywhere (WFA) program - yes, we even have a teammate working from a sailboat!
• Flat hierarchical system promoting direct impact and autonomy
• Monthly Free.day: dedicated time for personal growth and skills development • Lunch voucher with Swile card • A meaningful company: we became a Mission-driven company in March 2021
• Work alongside passionate experts: who will share their knowledge and help you develop and grow in your career. At Wakam, our "Free to Impact" culture is built on four essential pillars that shape everything we do : Communication & Knowledge Management
• Foster transparent collaboration across our flat organizational structure
• Share knowledge freely in our highly collaborative environment
• Contribute to our collective intelligence through open dialogue Curiosity
• Embrace our monthly Free.day for learning and skills sponsorship
• Think big and challenge conventional insurance norms
• Stay eager to learn and explore new possibilities Continuous Improvement
• Take initiative to transform the insurance industry
• Turn challenges into opportunities for innovation
• Constantly evolve our ways of working Outcome Oriented
• Focus on impact rather than hierarchy
• Drive results through clear objectives and autonomy
• Transform bold ideas into concrete solutions At Wakam, we are committed to fostering an inclusive environment where diversity is celebrated. If you require any reasonable adjustments during the recruitment process, please feel free to reach out to your recruiter.
About the Team Join the Digital Office at Wakam and help revolutionize the insurance industry through innovation and technology. We are a center of expertise where cutting-edge tools meet strategic thinking. Our teams design, develop, and optimize robust digital solutions that improve efficiency and user experience - all within an Agile, collaborative, and fast-paced environment.
Your Mission As DevSecOps , you'll be responsible for leading and implementing a DevSecOps approach across all teams involved in building and maintaining Wakam's digital assets. Your mission will be to raise security maturity levels across the organisation, prioritising initiatives based on risk.
Key Responsibilities
Strategy & Assessment
- Conduct a comprehensive assessment of the current security landscape, including AI-based solutions for proactive vulnerability detection.
- Define a clear DevSecOps target and roadmap integrating AI capabilities (e.g., smart automation of controls), in coordination with the architecture committee, and support its implementation.
- Prioritise actions using a global risk-based approach (not limited to security) tailored to the company's context.
- Evaluate and optimise existing architectures based on secure, modular design principles.
- Define performance and reliability metrics for security testing.
- Provide hands-on support to development and operations teams.
- Align business and technical risk perspectives.
- Train and raise awareness among teams on security best practices and the secure and ethical use of AI (e.g., compliance, bias).
- Foster a DevSecOps and AI-Driven Security culture within the organisation.
- Promote and implement shift-left security practices.
- Initiate, evolve, and monitor early-stage security practices.
- Maximise automation of security controls and tests.
- Design and deploy fast and reliable security test suites.
- Integrate SAST, DAST, and SCA tools into CI/CD pipelines with optimised response times.
- Implement parallel testing strategies and real-time feedback loops.
- Act across the entire value chain (development, deployment, production, monitoring).
- Ensure consistency of DevSecOps practices across all teams.
- Maintain a comprehensive view of risks and opportunities.
- Promote modular architectures and secure patterns (API Gateway, Zero Trust).
- Design resilient systems with clear responsibility segregation and critical component isolation.
- Document data flows and model attack surfaces.
- Automate security testing and code analysis.
- Deploy and configure static and dynamic analysis tools.
- Implement auto-rollback mechanisms and multi-level validation.
- Orchestrate secure deployments.
- Develop custom automation tools where necessary.
- Ensure comprehensive version control: code, infrastructure, security configurations, policies.
- Implement Infrastructure as Code (IaC) with integrated security checks.
- Manage secrets and certificates through dedicated tools (e.g., Vault).
- Conduct regular security audits.
- Ensure compliance with standards and frameworks.
- Maintain application and risk mapping.
- Participate in defining security policies.
- Deploy security monitoring tools.
- Participate in incident response activities.
- Automate anomaly detection and incident response.
- Implement real-time security dashboards.
- Set up smart alerts and automated escalation processes.
- Lead a DevSecOps watch and knowledge-sharing practice.
- Evaluate and integrate new DevSecOps technologies and best practices.
- Track AI evolution in cybersecurity (LLMs, ML, anomaly detection).
- Promote innovation and safe experimentation.
- Share best practices and feedback across the community.
- Minimum 7 years in Software Engineering and/or Operations.
- Solid background in software development and Ops.
- Strong experience in application security and SOC environments.
- Hands-on experience in cloud production environments.
- Experience with AI-based security tools (e.g., AI SIEM, behavioural detection) is a plus.
- DevOps & Automation : CI/CD (Azure DevOps, GitHub Actions)
- Containerisation : Docker, Kubernetes
- Infrastructure as Code : Terraform, Ansible
- Cloud Platforms : Azure, AWS
- Scripting Languages : Python, Bash, PowerShell
- Application Security : OWASP, secure coding principles
- Security Tools & Approaches : SAST, DAST, SCA, vulnerability scanners
- AI in Security : Knowledge of ML/LLMs for code analysis or augmented SOC use cases
- Strong understanding of security protocols and cryptography
- Familiarity with compliance frameworks
- Hands-on experience with vulnerability scanning tools
- Deep knowledge of infrastructure security best practices
- Strong coaching skills: influence, pedagogy, support
- Excellent communication: able to simplify technical risks
- Technical leadership: able to drive change across teams
- High autonomy and initiative
- Strategic vision with holistic understanding of business and tech challenges
- Ability to adapt to fast-changing environments
- Passionate about AI and cybersecurity with ongoing curiosity
- Streamline day-to-day workflows
- Automate repetitive tasks
- Enrich data analysis and decision-making
- Be at the heart of tech-led transformation
- Collaborate with passionate experts across disciplines
- Enjoy a culture that promotes ownership, agility, and innovation
- Interview with Talent Acquisition Partner
- Technical interview with Hiring Manager
- Team interview Case study
- Final Interview with VP & HR Business Partner
• True remote work flexibility with our Wakam From Anywhere (WFA) program - yes, we even have a teammate working from a sailboat!
• Flat hierarchical system promoting direct impact and autonomy
• Monthly Free.day: dedicated time for personal growth and skills development • Lunch voucher with Swile card • A meaningful company: we became a Mission-driven company in March 2021
• Work alongside passionate experts: who will share their knowledge and help you develop and grow in your career. At Wakam, our "Free to Impact" culture is built on four essential pillars that shape everything we do : Communication & Knowledge Management
• Foster transparent collaboration across our flat organizational structure
• Share knowledge freely in our highly collaborative environment
• Contribute to our collective intelligence through open dialogue Curiosity
• Embrace our monthly Free.day for learning and skills sponsorship
• Think big and challenge conventional insurance norms
• Stay eager to learn and explore new possibilities Continuous Improvement
• Take initiative to transform the insurance industry
• Turn challenges into opportunities for innovation
• Constantly evolve our ways of working Outcome Oriented
• Focus on impact rather than hierarchy
• Drive results through clear objectives and autonomy
• Transform bold ideas into concrete solutions At Wakam, we are committed to fostering an inclusive environment where diversity is celebrated. If you require any reasonable adjustments during the recruitment process, please feel free to reach out to your recruiter.
Publié le 2025-09-27
Emplois Recommandés
AGENT DE SÉCURITÉ EVÈNEMENTIEL LUXE H/F
GROUPE BUCKLER SECURITY
Paris 6e
Vous cherchez à intégrer une équipe dynamique et compétente pour participer à des événements prestigieux dans le secteur du luxe ? Rejoignez-nous chez BUCKLER SECURITY !Pour compléter notre équipe évè…
Voir les Détails
Publié le 2025-09-18
Ingénieur Commercial Crédit-Bail Immobilier H/F
Forums Talents Handicap
Paris 1er
Poste ouvert aux personnes en situation de handicap. La Banque Populaire Rives de Paris : Proche et Engagée ! Implantée dans 7 départements d'Ile de France et dans l'Oise, la Banque Populaire Rives…
Voir les Détails
Publié le 2025-09-27
Médecin généraliste -- H/F (TOUTE LA FRANCE)
MedikSanté
Paris
Chez Medadom nous proposons une activité de téléconsultation à destination des médecins généralistes et urgentistes. Suite à l'installation des cabines Medadom en pharmacie, le flux de patient …
Voir les Détails
Publié le 2025-07-22
Auxiliaire de Vie H/F/X
Azaé
Paris
REJOIGNEZ UNE AVENTURE HUMAINE ! Vous souhaitez donner du sens à votre quotidien en accompagnant ceux qui en ont besoin ? Vous recherchez un métier bienveillant, où l’entraide et la convivialité…
Voir les Détails
Publié le 2025-07-23
Orthophoniste H/F
SESSAD Dysphasia
Paris
Orthophoniste H/F 562n0am6zi L'orthophoniste intervient dans des établissements scolaires (écoles, collèges, lycées) auprès d'enfants et adolescents présentant des troubles DYS (dyslexie, dysphasie, …
Voir les Détails
Publié le 2025-08-29
Technicien Alarme H/F
Groupe Piment
Paris
Votre rôle : Sous la supervision du responsable technique, vous interviendrez seul(e) ou en binôme selon la complexité des projets. Vous jouerez un rôle clé dans la gestion technique des installation…
Voir les Détails
Publié le 2025-09-13
Human Resources Development Intern
Chanel
Paris
Chanel is seeking a Human Resources Development Intern to join its Horlogerie Joaillerie division in Paris. This role involves supporting the onboarding experience and talent development programs, ens…
Voir les Détails
Publié le 2025-09-06
Médecin d'aptitude sécurité F/H
SNCF
Paris
Description de l'offre Publiée le 06/08/2025 Description de l'employeur Rejoindre SNCF, c'est choisir de construire votre avenir dans une entreprise qui sait encourager la performance et l'i…
Voir les Détails
Publié le 2025-09-26
(Junior/Mid) Dev fullstack/Backend - Startup SaaS B2B
Matchee
Paris
Le besoin CDI uniquement et ouvert en full remote Pour le compte d'un client startup dans l'univers du SaaS B2C, nous recherchons une Développeuse Junior / Mid . La startup développe e…
Voir les Détails
Publié le 2025-09-24
Junior Business Analyst
Luxoft
Paris
We've been engaged by a large French financial institution to provide resources for a range of Capital Market projects. Joining this program you will have the benefit of working with an established…
Voir les Détails
Publié le 2025-09-01