Job description
We're a product-first team on a mission to help grow the cybersecurity culture 🔐
We want to instill cybersecurity good practices to employees in a way that's actually effective, and entertaining enough so that employees don't feel like they're working. Think Duolingo but for cybersecurity.We created a platform to easily rollout a cybersecurity awareness program: the platform sends chat-based 4-minutes long courses to teams. Following the courses, the other side of the platform simulates phishing attacks, to prepare employees to face hackers but in a safe environment.
Created in 2020, Riot has raised $45m with top-notch investors (Y Combinator, Base10, Funders Club and Frst Capital), and is now protecting more than 2,000,000 employees in over 2,000 companies (including Intercom, Deel and Deezer) all over the world.
Cybersecurity is everywhere. It's impacting everyone, everyday, and it's becoming the number one risk to any organization, whether it's a small business or a big firm. Yet, the cybersecurity culture in most companies is a disaster. Hackers are leveraging this by targeting the weakest link: the employees. We're on a mission to fix that.
You will join our Platform squad. In this role, you will be responsible for building, scaling and securing the infrastructure that powers Riot's products and enables every other team to ship fast and safely. Engineers at Riot are strongly involved in product and architecture decisions, and our DevOps work is no exception: you'll have a real say on the strategic technical choices we make.
About the role
- Finalize the transition to a fully Terraform-managed infrastructure, reproducible, cleanly structured and well-organized
- Lead the reflection on ECS vs Kubernetes: needs analysis, pros/cons, and decision on a potential migration
- Security hardening: drive best practices and strengthen our overall security posture (ISO 27001 in progress)
- Long-term goal: be able to deploy fully independent infrastructure on demand, notably to support our expansion to the US market
- Improve developer experience: better CI, faster deployments, cleaner onboarding/offboarding processes
- FinOps: rationalize cloud costs while keeping a high bar on quality and reliability
Stack
- AWS: ECS Fargate today, potential move to Kubernetes (you'll be part of that decision)
- Database: Aurora PostgreSQL
- Monitoring: Datadog
- CI: GitHub Actions
- IaC: Terraform with Atlantis
- Backend: 2 monoliths — one in Elixir (new), one in Node.js / TypeScript / NestJS (legacy, to sunset within a year)
=> We're still iterating on some infra-related technical choices (ECS vs Kubernetes, Atlantis vs alternatives, etc.). Whoever joins will be a key voice in these discussions.
The goal is to pick the best technologies that serve our business needs.
About you
- You're a doer. That's core to Riot's culture
- You have 4+ years of experience in DevOps / Platform / SRE roles
- Strong AWS culture, hands-on with Terraform, comfortable with IaC at scale
- Pragmatic over dogmatic: you pick the right tool for the job, not the trendy one
- You've operated user-facing infrastructure with zero-downtime deployments
- You're autonomous, proactive, and able to take ownership of complex topics
- Security-minded: you naturally think about hardening, secret management, and compliance
- You're not a security engineer but you're comfortable contributing to ISO 27001 / SOC 2 efforts
- You don't need to be an expert on cybersecurity, but you need to be motivated by the mission
- You're based in Paris or you're willing to relocate
Process
- First call with Thomas, our Tech Talent Acquisition Manager (30min)
- Hiring manager call with Adrien, Engineering Manager Platform (30min)
- Onsite interview: case study + experience deep-dive with the team (2h)
- Fit interview with our CTO & CEO (30 + 30min)