Security Engineer

About Pigment

Pigment is the AI-powered business planning and performance management platform built for agility and scale. We connect people, data, and processes in one intuitive, feature-rich solution, empowering every team—from Finance to HR—to build, adapt, and align strategic plans in real time.

Founded in 2019, Pigment is one of the fastest-growing SaaS companies globally. Industry leaders like Unilever, Snowflake, Siemens, and DPD use Pigment daily to make more informed decisions and confidently navigate any scenario. With a team of 500+ across Paris, London, New York, San Francisco, and Toronto, we've raised nearly $400M from top-tier investors and were named a Visionary in the 2024 Gartner® Magic Quadrant™ for Financial Planning Software.

At Pigment, we take smart risks, celebrate bold ideas, and challenge the status quo—all while working as one team. If you're driven by innovation and ready to make an impact at scale, we’d love to hear from you.

The Opportunity

In the context of rapid growth and a strong focus on AI adoption, Pigment’s security team is well established and expanding in the area overseeing its engineering operations, with a broad project portfolio to bring to fruition. This position will contribute in the execution of this very exciting roadmap with a strong focus on application and infrastructure security, and will allow the candidate to acquire or improve a wide range of skills from governance to technical expertise, reporting to the CISO. Our operations are notably integrated into a rigorous SOC 2 and ISO 27001 certification framework. This role encompasses a broad range of security domains. While immediate expertise in all areas is not required, proficiency across these fields will be beneficial.

Key Responsibilities

• Security Strategy & Roadmap: Define a risk-driven security roadmap for Pigment's product and infrastructure. This includes designing new security features within the product and continuously enhancing defense‑in‑depth controls. Prioritise the roadmap items, and exercise influence on the product and engineering team to obtain their buy‑in in their delivery.
• Technical Security Advisory & Risk Assessment: Serve as a security advisor for developers, product managers, and other key stakeholders. Proactively identify and assess project‑related risks and conduct thorough security reviews of code, architecture, and configurations. Deliver actionable solutions that strike an acceptable balance between risk and business benefit, escalating any high‑stakes occurrences that require senior management intervention or arbitration.
• Security Assurance & Testing: Participate in security assurance activities, such as coordinating third‑party audits, conducting internal code, architecture and configuration reviews, managing red team exercises, and overseeing the bug bounty program. Facilitate the compliance efforts by measuring and managing controls KPIs.
• Vulnerability Management: Drive the end‑to‑end vulnerability remediation process, covering detection, reproduction, scoring, triage, prioritization, design or validation of mitigation strategies, verification of remediation, and management/improvement of vulnerability KPIs.
• Monitoring & Incident Detection: Continuously improve our security monitoring and incident detection capabilities, working with infrastructure and development teams to identify and collect relevant datapoints, identify security events having a high signal/noise ratio and implement alerts and response playbooks for them.
• Incident Response & Automation: Contribute to security investigations related to incident response and fraud. Develop automated routines to enhance efficiency in these areas.
• Security Evangelism: Participate in developing and delivering employee security awareness training. Act as a security evangelist, particularly for key internal groups such as product teams, developers and SREs.

Example Projects

• Drive the secure design and development of Pigment’s AI‑powered features (including MCP Server and Modeler Agent) by performing threat modeling, conducting design reviews, partnering closely with engineers, and performing security assessments.
• Continuous improvement of the implementation of least privilege across the production environment, and CI/CD.
• Improve the efficiency of Security processes, leveraging automation and AI systems (ex: SIEM).

Environment

The scope of this role is centered around the production environment (although some projects could be related to internal IT security).

• Locations: Paris, London and NYC.
• Operating Systems: MacOS, Windows, Linux.
• Cloud & Infrastructure: GCP, Kubernetes, Terraform, Postgres, SingleStore, Vault.
• Security Tools & Protocols: Okta, OAuth, JWT, CloudFlare ZTNA, Falco, Wiz, Riot.
• Development: C#, .NET Core, TypeScript, React, Python, Go.
• Monitoring & SIEM: Datadog (SIEM).
• Productivity & HR: Google Workspace, JumpCloud, Vanta, Hibob, Slack, GitHub, HackerOne.
• Compliance: SOC 1, SOC 2, ISO27001.

Who You Are

• You have at least 5 years of experience on security topics, either as Security Engineer or Security consultant (you can be more experienced).
• You are hands‑on (the position does not include people management).
• You have strong technical expertise in security and a broad background in tech (development, databases, networking, web, etc).
• You have great team spirit with a problem‑solving, can‑do attitude.
• You have a good dose of humility and the willingness to grow and help your team grow (no matter your seniority).
• You speak English fluently.

What We Offer

• Competitive package.
• Stock options to ensure you have a stake in Pigment's growth.
• The best health insurance with Alan Blue, entirely free for you and your family.
• Weekly lunch and lunch vouchers (Swile card) to cover your lunch breaks with total flexibility.
• Subscription to Egym Wellpass (ex‑Gymlib) for full access to gyms, studios, and wellness spaces across France.
• A Learning Stipend per year, to develop into areas that amplify impact for your careers or personal development.
• Remote work stipend to have the best workstation possible at home.
• Along with one company offsite every year, we have brand new offices at the heart of major cities including New York, San Francisco, Toronto, Paris, and London.
• High‑end equipment (based on stock/availability) to do your work in the best conditions.

Background Checks

We conduct background checks as part of our hiring process, in accordance with applicable laws and regulations in the countries where we operate. This may include verification of employment history, education, and, where legally permitted, criminal records. Any checks will be conducted lawfully prior to formal employment contracts being signed, with candidate consent, and information will be treated confidentially.

Equal Opportunity Employer

Pigment is an equal opportunity employer. We believe diversity is a strength and fosters innovation. We are committed to enabling everyone to feel included and valued in the workplace. All qualified applicants will receive consideration for employment without regard to age, color, family, gender identity, marital status, national origin, physical or mental disability, sex—including pregnancy—sexual orientation, social origin, or any other characteristic protected by applicable laws. We may process your personal data in accordance with our HR Data Protection Notice. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.