<p><strong><span style="font-size:18px;">About BlaBlaCar</span></strong><br><br><span style="font-size:16px;">BlaBlaCar is the world’s leading community-based travel app enabling 27 million members a year to carpool or travel by bus in 21 countries. Our team of 800 employees counts over 50 nationalities and is spread across our 5 global offices, 30% working fully remotely.</span></p><div><br></div><div><p>By joining our Corporate Services department, you will be working alongside talented individuals grouped in small agile teams that each have strong ownership on their stack and goals. <br><br>Corporate Services is composed of six teams which “Provide tools, services, and expertise that enable BlaBlaCar internal teams to fulfill their mission with efficiency, productivity, and comfort.”. </p><p>The <strong>Security Team</strong> has three main objectives, driving the security team roadmap: </p><ul><li><p>Reduce BlaBlaCar risk exposure by defining and implementing a strategy to identify, report and tackle the most critical risks</p></li><li><p>Implement a shift-left strategy and autonomy within the teams via training, guidelines and tooling</p></li><li><p>Detect, investigate and respond to security incidents</p></li></ul><p>By design, the role requires a global vision of BBC perimeter, risks and regulation. You will have to ensure that the security practices and security frameworks are well implemented across our various business lines or locations. To accomplish the security mission, some of the processes / framework are directly operated by the security team, while others are delegated within the organization. </p><p>To fulfill the mission, you will be working with several stakeholders : </p><ul><li><p>The Legal team,especially the DPO team, as a daily partner </p></li><li><p>The IT Ops team to deploy security tools and best practices to all employees and contractors</p></li><li><p>The Product &amp; Engineering teams, working with each service and infrastructure teams to ensure our product and our user's data are secure and protected.</p></li></ul></div><br><br><h3>Your Responsibilities</h3><ul><div><p><strong>In cooperation with your manager, CISO &amp; Head of corporate Services, and your team:</strong></p><li><p>Plan and implement comprehensive risk-driven security strategies</p></li><li><p>Manage the security team (4 Individual Contributors) and the associated cost center (security tools contract management and financial follow up)</p></li><li><p>Ensure a strong coordination with department managers to determine security needs and ensure security strategy is well understood and implemented</p></li><li><p>Ensure processes within the company and with external stakeholders are robust and properly followed</p></li><li><p>Define a middle to long-term Security strategy which would fit with BBC values. A key aspect would be to preserve secure processes within an international context</p></li><li><p>Ensure compliance with company policies and security industry regulations or recommendations</p></li></div></ul><h3>Your Qualifications</h3><ul><div><li><p>Experience in risk management, auditing internal processes and tools</p></li><li><p>Proven track record of team management and leadership skills</p></li><li><p>Strong interpersonal and communication skills, ability to explain complex security subjects to non-technical people</p></li><li><p>Global and broad knowledge in security on main attacks vectors and associated defense strategies</p></li><li><p>Knowledge on security/privacy regulations and standards (GDPR, PCI DSS,…)</p></li><li><p>Relevant experience in a company operating large-scale production systems and web services / relevant experience in Security Audits for consulting firms</p></li><li><p>Optional : Advanced ability to coordinate responses to security breaches and threats</p></li></div></ul><h3>Technical stack</h3><ul><div><li><p>Security tooling : SentinelOne, Splunk, OneLogin, Wiz, Datadome, Sysdig</p></li><li><p>IT environment: Windows, MacOS and Chromebook with a BeyondCorp- inspired vision</p></li><li><p>Core Infrastructure: Kubernetes, Google Cloud Platform, Istio</p></li><li><p>Languages: Go for Infra/Tooling, Java and PHP for backend services. Go for the custom security tooling.</p></li><li><p>GitOps/Delivery: GitHub, Terraform, Flux, Helm, Jenkins</p></li><li><p>Datastores: MariaDB, PostgreSQL, Kafka</p></li><li><p>Observability: Datadog, Grafana</p></li></div></ul><h3>What we have to offer</h3><ul><div><li><p>Hybrid position : 2 days at the office per week </p></li><li><p>50% healthcare coverage (Alan)</p></li><li><p>4 additional weeks on top of legal maternity/paternity leaves</p></li><li><p>Financial support for home office equipment</p></li><li><p>Minimum 25 days holiday per year </p></li><li><p>Local meal plan policy (Swile card)</p></li><li><p>50% transportation paid (Forfait Mobilité Durable)</p></li><li><p>Free unlimited carpooling &amp; bus rides</p></li><li><p>Personal growth via trainings, mentorship, and internal mobility programs</p></li><li><p>Employee Stock ownership plan</p></li><li><p>Regular team building events</p></li><li><p>1 day off per year to test our product</p></li></div></ul><h3>Hiring process</h3><ul><div><ol><li><p>45-min interview with Chloé FRIESS, Talent Acquisition Manager - career path, growth mindset</p></li><li><p>60-min interview with <span>Jérémy COURTIAL</span>, Senior Security Engineer - Security knowledge, risk management, people management, teamwork - based on Case Study </p></li><li><p>60-min interview with <span>Camille MARSIGNY</span>,CISO &amp; Head of corporate Services - strategic thinking, delivery &amp; people management, and teamwork - based on Case Study</p></li><li><p>30-min skip-level with <span>Nicolas SALVY</span>, CTO - culture fit and career aspirations</p></li></ol></div></ul><br><div><em style="font-size:16px;">BlaBlaCar is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.</em></div>

<p><span style="font-weight: 400;">BlaBlaCar is the world&rsquo;s leading community-based travel app enabling 27 million active members a year to share a ride in 21 countries. Its technology matches drivers with empty seats with passengers heading the same way, so they can share the cost of the trip. With the mission to be the go-to marketplace for shared travel, BlaBlaCar combines carpooling with bus journeys from over 5 000 operators to offer a wide choice of affordable and sustainable travel solutions, all in one app.</span></p>
<p><br /><span style="font-weight: 400;">In 2023, BlaBlaCar&rsquo;s trusted community connected 2,4 million meeting points worldwide and enabled 104 million human encounters. Carpool drivers saved 513 million euros, and all BlaBlaCar&rsquo;s mobility services contributed to avoiding 2 million tonnes of CO</span><span style="font-weight: 400;">2</span><span style="font-weight: 400;"> emissions.</span></p>

Engineering Manager - Security Squad

<p><strong><span>About BlaBlaCar</span></strong><br /><br /><span>BlaBlaCar is the world’s leading community-based travel app enabling 27 million members a year to carpool or travel by bus in 21 countries. Our team of 800 employees counts over 50 nationalities and is spread across our 5 global offices, 30% working fully remotely.</span></p><div><br /></div><div><p>By joining our Corporate Services department, you will be working alongside talented individuals grouped in small agile teams that each have strong ownership on their stack and goals. <br /><br />Corporate Services is composed of six teams which “Provide tools, services, and expertise that enable BlaBlaCar internal teams to fulfill their mission with efficiency, productivity, and comfort.”. </p><p>The <strong>Security Team</strong> has three main objectives, driving the security team roadmap: </p><ul><li><p>Reduce BlaBlaCar risk exposure by defining and implementing a strategy to identify, report and tackle the most critical risks</p></li><li><p>Implement a shift-left strategy and autonomy within the teams via training, guidelines and tooling</p></li><li><p>Detect, investigate and respond to security incidents</p></li></ul><p>By design, the role requires a global vision of BBC perimeter, risks and regulation. You will have to ensure that the security practices and security frameworks are well implemented across our various business lines or locations. To accomplish the security mission, some of the processes / framework are directly operated by the security team, while others are delegated within the organization. </p><p>To fulfill the mission, you will be working with several stakeholders : </p><ul><li><p>The Legal team,especially the DPO team, as a daily partner </p></li><li><p>The IT Ops team to deploy security tools and best practices to all employees and contractors</p></li><li><p>The Product &amp; Engineering teams, working with each service and infrastructure teams to ensure our product and our user's data are secure and protected.</p></li></ul></div><br /><br /><h3>Your Responsibilities</h3><ul><div><p><strong>In cooperation with your manager, CISO &amp; Head of corporate Services, and your team:</strong></p><li><p>Plan and implement comprehensive risk-driven security strategies</p></li><li><p>Manage the security team (4 Individual Contributors) and the associated cost center (security tools contract management and financial follow up)</p></li><li><p>Ensure a strong coordination with department managers to determine security needs and ensure security strategy is well understood and implemented</p></li><li><p>Ensure processes within the company and with external stakeholders are robust and properly followed</p></li><li><p>Define a middle to long-term Security strategy which would fit with BBC values. A key aspect would be to preserve secure processes within an international context</p></li><li><p>Ensure compliance with company policies and security industry regulations or recommendations</p></li></div></ul><h3>Your Qualifications</h3><ul><div><li><p>Experience in risk management, auditing internal processes and tools</p></li><li><p>Proven track record of team management and leadership skills</p></li><li><p>Strong interpersonal and communication skills, ability to explain complex security subjects to non-technical people</p></li><li><p>Global and broad knowledge in security on main attacks vectors and associated defense strategies</p></li><li><p>Knowledge on security/privacy regulations and standards (GDPR, PCI DSS,…)</p></li><li><p>Relevant experience in a company operating large-scale production systems and web services / relevant experience in Security Audits for consulting firms</p></li><li><p>Optional : Advanced ability to coordinate responses to security breaches and threats</p></li></div></ul><h3>Technical stack</h3><ul><div><li><p>Security tooling : SentinelOne, Splunk, OneLogin, Wiz, Datadome, Sysdig</p></li><li><p>IT environment: Windows, MacOS and Chromebook with a BeyondCorp- inspired vision</p></li><li><p>Core Infrastructure: Kubernetes, Google Cloud Platform, Istio</p></li><li><p>Languages: Go for Infra/Tooling, Java and PHP for backend services. Go for the custom security tooling.</p></li><li><p>GitOps/Delivery: GitHub, Terraform, Flux, Helm, Jenkins</p></li><li><p>Datastores: MariaDB, PostgreSQL, Kafka</p></li><li><p>Observability: Datadog, Grafana</p></li></div></ul><h3>What we have to offer</h3><ul><div><li><p>Hybrid position : 2 days at the office per week </p></li><li><p>50% healthcare coverage (Alan)</p></li><li><p>4 additional weeks on top of legal maternity/paternity leaves</p></li><li><p>Financial support for home office equipment</p></li><li><p>Minimum 25 days holiday per year </p></li><li><p>Local meal plan policy (Swile card)</p></li><li><p>50% transportation paid (Forfait Mobilité Durable)</p></li><li><p>Free unlimited carpooling &amp; bus rides</p></li><li><p>Personal growth via trainings, mentorship, and internal mobility programs</p></li><li><p>Employee Stock ownership plan</p></li><li><p>Regular team building events</p></li><li><p>1 day off per year to test our product</p></li></div></ul><h3>Hiring process</h3><ul><div><ol><li><p>45-min interview with Chloé FRIESS, Talent Acquisition Manager - career path, growth mindset</p></li><li><p>60-min interview with <span>Jérémy COURTIAL</span>, Senior Security Engineer - Security knowledge, risk management, people management, teamwork - based on Case Study </p></li><li><p>60-min interview with <span>Camille MARSIGNY</span>,CISO &amp; Head of corporate Services - strategic thinking, delivery &amp; people management, and teamwork - based on Case Study</p></li><li><p>30-min skip-level with <span>Nicolas SALVY</span>, CTO - culture fit and career aspirations</p></li></ol></div></ul><br /><div><em>BlaBlaCar is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.</em></div>

Engineering Manager - Security Squad

About the Job

About the Company

BlaBlaCar

Similar Jobs

Senior Security Engineer (F/M/D)

Senior Security Engineer (F/M/D)

Director, Corporate Security

Director, Corporate Security

Senior Manager of Global Security

Senior Manager of Global Security

Security Operations Engineer - Germany

Security Operations Engineer - Germany

Principal, Security Engineer SOC

Principal, Security Engineer SOC

Principal, Security Engineer

Principal, Security Engineer

Senior Security Engineer

Senior Security Engineer

Cyber Security Lead

Cyber Security Lead

Vice President & Chief Information Security Officer

Vice President & Chief Information Security Officer

Senior GRC Analyst & Information Security Officer

Senior GRC Analyst & Information Security Officer