Security Automation Engineer

Contentsquare is looking for a Junior Security Automation Engineer to join our Development, Security, and Operations Team (DevSecOps). Reporting directly to a Senior Cybersecurity Engineer, you will play a crucial role in scaling our security capabilities by automating security toolings, workflows, and threat detection mechanisms.

Contentsquare provides a globally leading SaaS service and commits to the highest security standards for its customers. We are ISO 27001 and ISO 27701 certified and maintain robust security initiatives (SOC 2 Type 2 report, private bug bounty program, SIEM, advanced security awareness, etc.). Working alongside other cybersecurity experts, your mission will be to ensure the integrity of our products and keep our users safe by building automated, resilient, and scalable security defenses.

As a core technical member of the DevSecOps Team, you will transition security from manual processes to automated pipelines. Your responsibilities include:

AI-Driven Vulnerability Discovery: Develop, orchestrate, and automate AI agent workflows (leveraging LLMs and autonomous security tools) to proactively scan, identify, and validate vulnerabilities across our codebase and infrastructure.

Security Tooling Automation: Develop, deploy, and maintain automation scripts and integrations for our security toolstack (e.g., SAST/DAST in CI/CD pipelines, automated in-house scanning capabilities, and CSPM).

Vulnerability Management: Automate the tracking, reporting, and follow-up of vulnerability resolution actions across infrastructure and applications.

Continuous Improvement: Participate in technical security audits and penetration tests, utilizing the findings to write new automated detection rules.

Team Collaboration: Share your knowledge, document automated workflows, and assist engineering teams in adopting secure-by-default and automated practices.

Education & Experience

You hold a Master’s degree (Bac +5) or equivalent in Computer Science, Cybersecurity, or Software Engineering.

You have initial experience (0 to 3 years, including solid internships or work-study programs) focusing on DevSecOps, security engineering, or backend development with a strong security mindset.

Technical Competencies

Automation & Scripting: Strong proficiency in Python and Shell scripting.

AI & Emerging Tech: Basic understanding of integrating AI/LLM/MCP APIs into automated workflows or custom scripts is a strong plus.

DevOps & CI/CD Tooling: Hands-on familiarity with modern development ecosystems, particularly GitHub (GitHub Actions), Terraform, ArgoCD, and Ansible.

Cloud & Containers: Good understanding of AWS and/or Azure architectures, as well as containerization technologies (Kubernetes, Docker).

Security Fundamentals: Strong grasp of cybersecurity concepts and applied methodologies: OWASP Top 10, public key encryption, TLS, IAM, and secure credentials management.

Familiarity with our Tech Stack: Exposure to tools like Google SecOps, Crowdstrike, Datadog ASM (WAF), and frameworks like NestJS, Vue.js, or Angular.

Soft Skills

You possess an "automate-first" mindset: if you have to do a manual security task twice, you want to script it the third time.

You demonstrate rigor, curiosity, and strong analytical problem-solving skills.

You thrive in a collaborative team environment but are fully capable of driving your technical tasks independently.

Fluent in English and French (both written and spoken).