Senior Corporate Security Engineer - IT Security (x/f/m)

Doctolib is hiring a Senior Corporate Security Engineer - IT Security (x/f/m) in Paris, France. Level rates it ; you can apply on Doctolib.

Level's read on this job

Level rates this cybersecurity role Little AI ●○○○: aI is not part of the work.
Tools and skills the posting cites include Claude, Terraform and GitHub.
Level classifies it as a senior role.
Level lists 155 other open roles at Doctolib.

AI in this role

Secure corporate environments and SaaS applications including AI tool governance as a Senior Corporate Security Engineer at Doctolib.

claudeterraformgithubelastic-siem

ai-agentssecopszero-trustidentity-managementincident-response

Set a new pulse for healthcare!

We are looking for a Senior Corporate Security Engineer to join the Corporate Security team in SecOps. Your mission will be to secure everything Doctolibers rely on to do their best work identities, endpoints, SaaS applications, and the zero-trust network that connects them in a highly regulated healthcare environment (HDS, ISO 27001, C5) where security directly impacts patient safety and trust. You will own security programs end-to-end, shipping every control as code and driving adoption across teams, contributing directly to the protection of data for over 80 million patients and 400,000 health professionals. Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.

What you'll do

Your responsibilities include but are not limited to:

Own corporate security programs from architecture to enforcement: conditional access, phishing-resistant authentication, device compliance, SaaS and third-party app governance (including AI tools), and zero-trust network access.
Ship every change as code: use Terraform and GitHub pull requests to bring controls to production designed, peer-reviewed, rolled out progressively (report-only → enforce), and always reversible.
Drive adoption across teams: write technical proposals, align IT and business stakeholders, plan communications and exception handling, and land security controls without disrupting how people work.
Evaluate and secure the tools Doctolibers adopt: conduct security reviews of SaaS integrations and AI tools, and deliver pragmatic, risk-based responses to shadow IT.
Investigate and improve: lead incident investigations on the corporate perimeter end-to-end, and continuously improve detection rules and response playbooks in our Elastic SIEM.
Mentor more junior engineers and contribute to a team culture of engineering excellence and peer review.

Who you are

Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply. You'll be a great fit if you:

Have 5+ years of hands-on experience securing corporate/enterprise environments — identity, endpoints, SaaS, and network — including at least 2 years at a senior level. You have built and enforced security controls in production (not only monitored alerts), and owned at least one significant program end-to-end, such as an MFA rollout, a device-compliance initiative, or a SaaS access-governance project.
Have strong daily mastery of GitHub, Terraform, and AI coding assistants (Claude or equivalent). You ship security work as reviewed pull requests and use AI agents as a structural part of your workflow, not an occasional helper.
Have deep identity & access expertise: identity providers, conditional access policies, OAuth/application governance, and modern authentication standards (passkeys, phishing-resistant MFA).
Have a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills — you can carry a proposal from draft to cross-team adoption.
Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.

It would be fantastic if you:

Have detection engineering or SIEM experience (writing and tuning your own queries).
Are curious about platform security topics (cloud, Kubernetes, supply chain) and willing to contribute beyond your core perimeter.
Have prior experience in a regulated industry (healthcare, fintech, or public sector).

Life at Doctolib Tech

Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.
Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.
We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision here.

Want to learn more about our tech culture and environment? Visit the Doctolib Tech site.

What we offer

Free comprehensive health insurance (basic package) for you and your children
25 days of paid vacation per year, plus up to 14 days of RTT
Free mental health and coaching services through our partner Moka.care
Work from abroad for up to 10 days per year thanks to our flexibility days policy
Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib
A subsidy from the work council to refund part of the membership to a sport club or a creative class
50% reimbursement of your public transport subscription
Parent Care Program: receive one additional month of leave on top of the legal parental leave
Enrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth
For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support
Relocation support in case of international mobility
Access to the best AI tools for coding, development and dedicated training

Our interview process

TA Screening
Technical Assessment (~90 min, live): security questions followed by a hands-on scenario worked through together — with an AI assistant available directly in the platform, the way we actually work
Behavioral Interview
At least one reference check

We want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our candidate experience page.

Job details

Permanent position
Tech stack: Terraform, GitHub, Entra ID, Intune, CrowdStrike, Cloudflare, Elastic, Google Workspace
Full-time
Paris, France
Hybrid work setup (up to 2 remote days per week)
Start date: as soon as possible

We welcome everyone

At Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination. The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability. To ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process. Join us in building the healthcare we all dream of!

Your data privacy

All information provided is processed by Doctolib for application management. For data processing details, click here: France. Please contact hr.dataprivacy(at)doctolib.com for inquiries or to exercise your rights.

How we rate this

Senior Corporate Security Engineer - IT Security (x/f/m) at Doctolib rates 20 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Senior Corporate Security Engineer - IT Security (x/f/m) is an open job at Doctolib.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Paris, Paris, France.
The job was posted on June 3, 2026.
Seniority: senior.
Applications are handled by Doctolib. Apply on Doctolib

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

AI agentsSecopsZero TrustIdentity ManagementIncident ResponseClaudeTerraformGitHub

Also common in cybersecurity jobs at this level

AWS Azure Google Cloud C++LLM SQL

Pay

Typical cybersecurity job: $159k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

How do you decide when an AI agent can act on its own versus asking for approval first?
Tell me about a project where secops was part of your work. What did you do?
Tell me about a project where zero trust was part of your work. What did you do?
Tell me about a project where identity management was part of your work. What did you do?
Tell me about a project where incident response was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: AI agents, Secops, Zero Trust, Identity Management, and Incident Response. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Get an express CV review Check your resume with the ATS resume checker