Born in 2016 from the merger of Groupe PSA and the TravelCar startup, Free2Move was created to simplify and guarantee mobility for everyone.

Today, thanks to our agile and conquering state of mind, we bring together a set of new mobility services to meet the travel needs of our customers.

With Free2Move, you can find the closest vehicule and book it for minutes / hours / days in Madrid, rent a car for your stay in Italy, find the nearest charging point for your electric car everywhere in Europe, book a parking space for your weekend in Paris ... all in one click and on the same application !

Free2Move is the Nº1 reflex for more than 1 million users, in more than 170 countries across 5 continents, available in 30 languages and 26 currencies. Free2Move has 5,000 partners and offers 100k+ vehicles available to rent.

If you want to join a team of passionate, dynamic, motivated, and creative people, in a human-sized, innovative, agile, internationally oriented environment ... join us!

💺 Join us!

MISSIONS

As part of its growth Free2Move is looking for a Security Engineer to strengthen its teams.

You will be joining the cybersecurity Team and report to the Head of Security.

In direct relation with the CloudOps Team and the development team, you will help to implement security in various projects and exploit the solution in the respect of our security standards to ensure that our clients' data are secure.

YOUR RESPONSIBILITIES

As an Security Engineer, You should know how to prioritize, communicate clearly and compellingly, and understand how to maintain a high level of focus and excellence in a growing application landscape. Passion and discipline around cloud computing is critical, as is a high level of ownership and accountability. Your work responsibilities will include :

DevSecOps approach ::

• Perform reviews of security tools reports (Snyk, Gitlab, Defect Dojo dependency track, etc.) and perform issue triage
• Support the development teams is the resolution of the problem identified, and help them to automate patching with renovate bot
• Report to the Head Of Security on the security status of the CI/CD
• Document Security Coding Guidelines based on the OWASP to help the developers
• Demonstrate the impact and criticality of vulnerabilities and bad coding practices
• Help dev team with the Threat modeling exercices
• Build security dashboard based on delivery and improvements metrics
• Be an active member of our security guild

Platform Hosting Security:

• Help in the implementation of log collection and with the event monitoring strategy? With the Architecture Guild, set up a Correlation and Detection process and standards.
• Monitor effectiveness, analyze, advise and improve Security rules around Infrastructure components (DDOS, WAF, Firewall, IDS, etc.)
• Be part of the incident response process

YOUR SKILLS

• Fluent or advanced English level. All the work has to be done in English
• Experience in explaining to developers code security issue
• Experience with at least one WAF solution (AWS Shield, Nginx, Big IP, Radware, etc)
• Experience with ELK or Opensearch and / or Splunk
• Development knowledge, especially with nodejs or Java
• Knowledge in securing microservice (K8s & docker)
• Knowledge of code security tools (checkmarks, GitLab, Snyk, SonarQube, Acunetix, BurpSuite, Defect Dojo, Dependency Track, etc.)
• Pentesting experience is a plus
• Knowledge of one scripting language (Python is preferred)
• AWS and GitLab Knowledge
• Usage of ticketing software and documentation (Jira, Confluence..)
• Usage of Microsoft Office suite or G Suite

YOU ARE

• Graduating in IT or any other higher education relevant to computer science, development or Cybersecurity.
• 1 to 5 years of experience in a similar role (years of apprenticeship included)
• Passionate about cybersecurity (you will have to prove it).
• Comfortable working in an agile and remote environment.
• Patient and willing to train, demonstrate and explain vulnerability, coding issues and security vulnerabilities.
• Autonomous, organized, dynamic, curious, pedagogue and know how to be proactive
• Rigorous and pragmatic, you have good interpersonal skills, a strong ability to adapt, a sense of listening and a team spirit.

If you feel that it’s too much, maybe it’s because the Head Of Security wants to achieve great things. So, don’t be afraid, if you are motivated and passionate about security, please apply and let’s discuss it.

WHAT WE OFFER

Working at Free2Move means integrating a tribe in which excellence and the culture of performance are synonymous with having a good time; but it also means :

• The opportunity to revolutionize mobility with us!
• A great induction process with lots of surprises
• Career evolution
• Latest technological working tools
• Strong cooperation between our different teams
• International projects

Free2Move is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, origin, religion, sexual orientation, gender identity, age or nationality, and will not be discriminated against on the basis of disability.