Architecte cybersécurité (F/H)

## Your role As a Security Architect, you will act as the leading authority on security architecture, reporting to the Chief Technology Officer (CTO). You will be responsible for defining, governing and developing the security architecture strategy to ensure that ICT systems are secure, resilient and compliant. ## Key responsibilities - **Security Design Authority**: translating security requirements into scalable architectural models (Zero Trust NIST 800-207, NIST CSF, ISO 27001, CIS Controls v8) for cloud, hybrid and on-premises environments. - **Governance & Integration**: defining reference architectures and validating technical and integration designs within the architecture committee. - **DevSecOps & SSDLC**: managing and improving the secure software development lifecycle (NIST SSDF, OWASP SAMM, BSIMM), designing and implementing automated CI/CD pipelines, and integrating security tools (SAST, DAST, SCA, IaC analysis, secret detection). - **Cloud & API Security**: implementing cloud-native security controls (CIS benchmarks, NIST 800-53/190, MITRE ATT&CK), securing APIs (REST, GraphQL, OAuth 2.0/OIDC) and the software supply chain (SBOM generation and validation, artefact signing). - **Supporting teams**: facilitating threat modelling workshops (STRIDE, PASTA) and providing methodological playbooks to developers. ## Languages English: fluency essential, written and spoken. A second language (French, Spanish or Arabic) is an asset. ## Conditions CDI, based in Lyon 6e, hybrid work.