About the role
Company Description
Ubisoft is a global leader in the video game industry, with teams worldwide creating original and memorable gaming experiences, from Assassin’s Creed to Rainbow Six, Just Dance, and many others. We believe that diverse perspectives drive progress for both players and teams. If you are passionate about innovation and want to push the boundaries of entertainment, join our adventure and help us create the unknown.
Job Description
You will join the Security & Risk Management - Security Engineering team as an expert in application security and Secure Software Development Lifecycle (SSDLC). Within the AppSec team, you will prototype, maintain, and distribute the tools, guidelines, and automations that form the security baseline provided to Ubisoft development teams. You will also contribute to implementing these practices on the ground with the help of the Product Security teams.
Responsibilities
- Participate in identifying and prioritizing AppSec needs in conjunction with your team, Product Security, and involved teams, to transform field issues into capabilities, tools, and SSDLC improvements.
- Contribute to the AppSec / SSDLC program: design, prototype, implement, and maintain the tools that make up the SSDLC Toolbox (secret scanning, SCA, SAST, DAST, IDE integrations, MCP servers, etc.), then contribute to their industrialization and integration into the development workflows and platforms of the Software Factory.
- Support development teams, in collaboration with Product Security, in adopting SSDLC tools: coaching developers, integrating into their CI/CD pipelines, and contributing directly to the code when necessary.
- Experiment and integrate AI and agents into modern AppSec workflows: triage, analysis, and vulnerability remediation, MR/PR generation, integration via MCP, and automation of controls; adapt AppSec capabilities to AI-native development workflows and contribute to discussions on the evolution of application security at Ubisoft.
- Collaborate with the Security Engineering management and other key teams to implement and integrate AppSec capabilities and controls within development platforms and infrastructures.
- Contribute to documentation and guidelines to facilitate the use and adoption of tools.
Qualifications
- Solid experience in software development, ideally in the technology sector, with strong knowledge of Python (mandatory) and good knowledge of at least one of the following languages: C#, C++, Go, JavaScript.
- Ability to understand, reproduce, and correct application vulnerabilities, particularly concerning the main OWASP categories and secure coding issues.
- Experience in designing and prototyping solutions (POCs) through to their adoption by a pilot team, with the ability to experiment and innovate in an AI-native SDLC context.
- Experience with CI/CD processes, DevOps, and DevSecOps, as well as the integration of security tools into development workflows.
- Knowledge of software supply chain security, secret management, vulnerability management, and threat modeling.
- Usage of AI agents (Claude, MCP, Copilot, etc.) in development and security workflows, with a strong interest in experimentation and automation of these usages.
- Comfortable working in technical pairing and coaching peers or developers.
- Good interpersonal and communication skills; bilingual in French and English.
- Autonomous and able to adapt to changes.
Additional Information
- Compensation & Benefits: Profit sharing, company savings plan (PEE). In addition: 25 paid leave days, 12 RTT days, 50% transport pass coverage, restaurant vouchers, comprehensive health insurance, and many other Ubisoft benefits.
- Family Benefits: 20-week maternity leave, 7-week paternity/co-parental leave.
- Location: Our offices are in Saint Mandé (Line 1, Saint Mandé stop), featuring an on-site gym.
Diversity & Inclusion
As an employer, Ubisoft offers equal access to employment without distinction of gender, ethnicity, religion, sexual orientation, social status, disability, or age. Ubisoft is committed to developing an inclusive work environment that reflects the diversity of its player community within its teams.