Web3 Jobs with Medical insurance

Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 20% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in UK, US, Switzerland and Singapore, Ledger has a team of more than 900 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 6 millions units already sold in 200 countries. 

Your mission

• Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities 
• Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline.   Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure.
• Participate in the design and implementation of security architectures, from the design to the risk assessment.
• Track and monitor the organization's security maturity by leveraging automated tools. Extract, analyze, and report on key performance indicators (KPIs) and trends for reporting.
• Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis.
• Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement.
• Mentor and provide application security awareness to developers, ensuring secure coding practices are integrated into the development lifecycle..Monitor and assess the organization's security posture and propose improvements or new security solutions to address identified gaps.
• Work closely with the certification team for the SOC2 II gap analysis and provide technical guidance to fill the identified gaps with the infrastructure and engineering team.

What we’re looking for

• 5+ years of experience in cybersecurity, with a focus on DevSecOps & automation, security assessment, and mix environments (cloud-native, physical DCs, IT).
• Proficiency working in Unix/Linux environments, Git, Python, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
• Expertise in IAM design, ZTNA, access control architectures, SIEM, SoC, EDR and application security.
• Hands-on experience with security tooling deployment, monitoring, and incident response.
• Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders.
• Excellent presentation and written communication skills.
• Ability to work autonomously, deal with ambiguity, and handle high-pressure situations.

What’s in it for you?

• Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow. 
• Flexibility: A hybrid work policy.
• Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
• Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage. 
• Well-being: Personal development, coaching & fitness with our dedicated partners.
• Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days.
• High tech: Access to high performance office equipment and gadgets, including Apple products. 
• Transport: Ledger reimburses part of your preferred means of transportation. 
• Discounts: Employee discount on all our products.