Description
You will join Ubisoft as a Technical Lead – AppSec, an expert in application security and Secure Software Development Lifecycle (SSDLC). You will work within the Security & Risk Management - Security Engineering team, specifically with the AppSec team.
Your main responsibilities will include:
- Collaborating with your team, Product Security, and involved teams to identify and prioritise AppSec needs, transforming them into capabilities, tools, and SSDLC improvements.
- Contributing to the AppSec / SSDLC program, designing, prototyping, implementing, and maintaining tools that make up the SSDLC Toolbox.
- Supporting development teams, in collaboration with Product Security, in adopting SSDLC tools, coaching developers, integrating tools into CI/CD pipelines, and directly contributing to code when necessary.
- Experimenting with and integrating AI and agents into modern AppSec workflows, adapting AppSec capabilities to AI-native development workflows.
- Collaborating with the Security Engineering leadership and key teams to implement and integrate AppSec capabilities and controls within development platforms and infrastructures.
- Contributing to documentation and guidelines to facilitate tool usage and adoption.
The ideal candidate will have:
- Solid software development experience, preferably in the technology sector, with strong knowledge of Python and at least one of the following languages: C#, C++, Go, JavaScript.
- Ability to understand, reproduce, and correct application vulnerabilities, particularly in major OWASP vulnerability categories and secure coding issues.
- Experience in designing and prototyping solutions until pilot team adoption, with the ability to experiment and innovate in an SDLC AI-native context.
- Experience with CI/CD, DevOps, and DevSecOps processes, as well as integrating security tools into development workflows.
- Knowledge of software supply chain security issues, secret management, vulnerability management, and threat modelling.
- Familiarity with using AI agents in development and security workflows, with a marked interest in experimentation and automation.
- Strong technical pairing and coaching skills, with good relational and communication skills; bilingualism in French and English.
- Autonomy and adaptability to change.
Ubisoft offers various benefits, including participation, an employee savings plan, 25 days of paid vacation, 12 days of RTT, 50% reimbursement of transportation costs, meal vouchers, a good health insurance plan, and many other perks.