Skip to content
Vibe

Principal Security Engineer

ParisHybrid · France
Principal · FullTime · Engineering & Product
POSTED 17 SEPT
Apply Ask
Role
53 days opentrue age
Posted 17 Sept
Pay
€45k–€69kno pay posted
Market p25–p75
€45k–€69k
Paris · n=3 · 365d to 6 Nov
CompanyVibe →
19open roles
Opened · 30d
+0
Closed · 30d
−0
30d window
Market
219open · Principal Security
Opened · 7d
+105% of open
All security
8,291open
All tracked boards · live 10 Nov · n=219
Visa
✓licensed sponsor
UK licensed sponsor
✓Temporary Worker (A rating)
Checked 9 Nov
AWSGCPKubernetes

Streaming TV is no longer just a brand awareness channel. It’s becoming a core part of the performance marketing mix, alongside search and social. Vibe.co is building the platform that makes TV work like the rest of the acquisition stack: targeted, measurable, and optimized for results.

Vibe.co is an Audience First Streaming TV Advertising platform that gives marketers the tools to reach the right audiences, optimize campaigns in real time, and understand what’s actually driving business outcomes. With hyper-targeted segmentation, AI-powered recommendations, real-time optimization, and incrementality measurement, Vibe brings the precision and accountability of digital advertising to the biggest screen in the house.

Today, more than 12,000 brands use Vibe.co to reach 120 million+ households. And in August 2026, Vibe.co became a Walmart company, opening up a new chapter for the business and the industry. With Walmart’s first-party data and purchase signals now part of the Vibe platform, advertisers can connect TV advertising to real-world transactions and measure the impact of CTV with a level of precision previously associated with platforms like Google and Meta.

This is a unique moment to join Vibe. With Walmart’s scale, data, and reach behind us, we’re building the next generation of TV advertising and creating a more measurable, performance-driven future for the channel.

About the Role

You'll be Vibe's founding security hire. Security has been part of how we build since day one and we're already SOC 2 Type 2 compliant, but nobody has owned it full-time. Ad spend and headcount have both roughly doubled every year since 2022, enterprise partnerships keep expanding, and the more visible Vibe becomes, the more scrutiny comes with it. Now it needs an owner.

You'll define the risk model, set the roadmap, decide what we harden and what we accept, and turn policies into running procedures in code on the paths engineers and AI already use. That work happens in a cloud native ecosystem across AWS and GCP, with most of our services running on Kubernetes, everything as code and a GitOps deployment model.

Reporting to our, Head of Infrastructure, and joining a lean six-person Infrastructure and IT team. You won't do it alone, but you'll be the main contributor, and the person every team turns to on security. Since we joined forces with Walmart, you'll also coordinate directly with their cloud security teams.

What You'll Do

Risk & Governance

Map Vibe's risk model across every major system.

Set the security roadmap with clear priorities.

Security Engineering

Pave the road with guardrails and secure defaults enforced across the engineering tool set.

Ship the golden paths so the safe way is the easy one.

Harden security across our cloud native ecosystem (AWS and GCP) and third-party providers.

Own access management from onboarding to offboarding, and get it to the point where it runs without you.

Detection & Response

Prioritize vulnerability findings by real exposure, assign them to the team that owns the code, and follow remediation through to closure.

Own security incident response from detection through resolution.

Turn manual processes into pipelines that run on their own.

Launch and run Vibe's private bug bounty program.

Trust & Compliance

Own SOC 2 compliance end to end and maintain current certification.

Drive Vibe's future compliance initiatives and requirements.

Define Vibe's security posture and make it self-serve so enterprise deals clear security without routing through you.

Security Culture

Set clear, practical rules for safe AI use, built into the tools themselves, covering both the AI we ship in our products and the AI our teams work with every day.

Run security awareness training and measure behavior changes so the whole company raises its bar.

What You Need

Built a security function as a company's first security hire.

Write code comfortably and bring deep cloud-native security experience.

Managed a compliance framework at scale, such as SOC 2, ISO 27001 or HIPAA.

Source · VibeFirst seen 7 NovOriginal ↗