← All roles

Senior security engineer

Tsuga· Security
Apply on company site
Hybrid (Paris, France)Full-timePosted 2w ago

About the role

First dedicated security engineer at Tsuga, responsible for shaping and advancing the company-wide security posture, influencing product, infrastructure, and engineering practices with direct support from the CTO.

Responsibilities

  • Own our security posture across the product — including the control plane, customer data planes, and internal tooling. Define security practices, review designs, and help engineers ship securely.
  • Partner with Forward Deployed Engineers to ensure customers receive clear, consistent, and timely communication around security incidents and vulnerabilities.
  • Drive compliance and certifications alongside the CTO. Improve and automate the evidence collection and processes behind ISO 27001 and SOC 2.
  • Threat-model critical systems that interact with customer environments, including credentials, tunnels, deployment paths, and IAM.
  • Own the customer security process, from questionnaires and pentests to security reviews, and turn it into a scalable, repeatable workflow.
  • Build security into the development lifecycle through CI checks, dependency management, secrets management, and infrastructure-as-code reviews.

Qualifications

  • Hands-on experience securing cloud infrastructure and Kubernetes, ideally across multiple cloud providers.
  • Comfort reading and writing code. Stack includes TypeScript, Rust, Python, and Pulumi — able to review and contribute to code.
  • Experience with at least one SOC 2 or ISO 27001 certification cycle, and understanding of effective security and compliance tooling.
  • A pragmatic approach to risk. You enable engineers rather than gatekeep them.
  • Strong communication skills — ability to work effectively with engineers, customers, auditors, and leadership.

Skills

Required:Cloud securityKubernetesCode review / secure codingSecurity certifications (SOC 2 / ISO 27001)Communication
Last updated Oct 14, 2026. Interested? Apply on the company site.
Tsuga logo

About Tsuga

The enterprise observability that runs in your cloud.

Tsuga is a bring-your-own-cloud observability platform for logs, metrics, traces, and application performance management. It deploys inside your AWS account via infrastructure-as-code in under two hours. You get the control of self-hosted infrastructure without the operational burden of running it.

Application performance managementBuilt-in complianceInfrastructure monitoringLog managementObservability pipelinesOpen standards first: no lock-inOptimized costsSensitive data scanner
Company profileWebsite

More open roles at Tsuga