--- title: 'Platform Security Engineer (x/f/m) at Doctolib' canonical: 'https://feeny.ai/job/platform-security-engineer-x-f-m-doctolib-paris-fe730zkpfcxs' type: 'job' last_seen: '2026-09-15' --- # Platform Security Engineer (x/f/m) at Doctolib - **Company:** Doctolib - **Location:** Paris, France - **Posted:** 2026-09-09 - **Last confirmed live:** 2026-09-15 - **Apply:** https://job-boards.greenhouse.io/doctolib/jobs/7989159003 ## Job description Set a new pulse for healthcare! We are looking for a Platform Security Engineer to join the Security team at Doctolib. Your mission will be to protect sensitive healthcare data while enabling rapid, secure innovation. You will be responsible for securing Doctolib's cloud infrastructure and application ecosystem, combining multi-cloud security expertise with hands-on platform engineering — contributing directly to the safety of millions of patients and care teams who rely on our platform every day. Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients. ## What you'll do Your responsibilities include but are not limited to: - Own a platform security workstream end to end, from architecture to enforcement: scope it with your tech lead, design the control, roll it out progressively (report-only, then enforce), handle exceptions, and see it through to full coverage. Typical examples: hardening IAM across our AWS accounts, tightening cluster admission policies, or closing a class of misconfiguration for good. - Ship every change as code: Terraform and GitHub pull requests, peer-reviewed and always reversible. No console clicking, no undocumented state. - Harden our cloud and infrastructure baseline and keep it hardened: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls — building the guardrails and driving remediation of what they surface with platform and engineering teams, turning recurring findings into automation rather than tickets. - Investigate and improve: lead incident investigations on the platform perimeter end to end, and continuously improve detection rules and response playbooks in our Elastic SIEM. - Work in the open: write clear technical notes, drive adoption of your changes with the engineering teams they affect, and grow through code review and pairing with the rest of the team. ## Who you are Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply. You'll be a great fit if you: - Have 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure or platform engineering, including some exposure to a cloud environment (AWS, GCP or Azure) in production — an internship or apprenticeship in one of those roles counts. - Work daily with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests, and you are comfortable operating and debugging workloads on Kubernetes. - Use AI coding assistants (Claude or equivalent) as a normal part of how you work. - Have carried at least one project through to production — security or not — and stayed with it past the first deployment until it was actually adopted. - Have solid fundamentals: Linux, networking, cloud, Kubernetes and development/scripting, a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills — you can carry a proposal from draft to cross-team adoption. - Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus. It would be fantastic if you: - Have worked with a SIEM (Elastic, Splunk, or equivalent), writing and tuning your own queries. - Have done detection engineering, incident response, threat hunting, or CTFs. - Can point to public write-ups, open-source contributions, or a home lab. - Have prior experience in a regulated industry (healthcare, fintech, or public sector). Life at Doctolib Tech - Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements. - Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native. - We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision [here](https://careers.doctolib.com/ai-careers/). Want to learn more about our tech culture and environment? Visit the [Doctolib Tech site](https://careers.doctolib.com/tech-doctolib/). ## What we offer - Free comprehensive health insurance (basic package) for you and your children - 25 days of paid vacation per year, plus up to 14 days of RTT - Free mental health and coaching services through our partner Moka.care - Work from abroad for up to 10 days per year thanks to our flexibility days policy - Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib - A subsidy from the work council to refund part of the membership to a sport club or a creative class - 50% reimbursement of your public transport subscription - ParentCare Program: Enjoy full salary coverage (100%) during your first month of birth leave and 75% during the second, covered by Doctolib - Enrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth - For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support - Relocation support in case of international mobility - Access to the best AI tools for coding, development and dedicated training Our interview process - Recruiter Interview - Feature Building Interview - System Design Interview - Behavioral Interview - At least one reference check We want your experience to be clear, respectful, and transparent. Learn more about our hiring process on our [candidate experience page](https://careers.doctolib.com/tech-doctolib/getting-hired/). Job details - Permanent position - Tech stack: Terraform, AWS, Kubernetes, Elastic SIEM - Full-time - Levallois-Perret, France - Hybrid work setup (up to 2 remote days per week) - Start date: as soon as possible We welcome everyone At Doctolib, we are committed to improving access to healthcare for everyone. This translates into our recruitment process. We evaluate candidates based solely on qualifications and motivation, without any form of discrimination. The more diverse ideas are heard, the more our product will truly improve healthcare for all. You are welcome to apply to Doctolib, regardless of your gender, religion, age, sexual orientation, ethnicity, or disability. To ensure equal opportunities, we invite you to exclude personal information (e.g., pictures, age) from your applications. If you require any accommodation, please let us know for support during the hiring process. Join us in building the healthcare we all dream of! ## Your data privacy All information provided is processed by Doctolib for application management. For data processing details, click here: [France](https://doctolib.legal/B2C-Privacy-Policy-Career-FR). Please contact hr.dataprivacy(at)doctolib.com for inquiries or to exercise your rights. ## About Doctolib ## Core Business - **Primary industry**: Healthcare information technology (healthtech) / Software Development - **Target customers**: B2B (healthcare professionals across 120+ specialties) and B2C (patients managing their health journey) - **Mission or purpose statement**: “Build together the healthcare we all dream of” – making healthcare more human, sustainable, and accessible. The company is a certified B Corp and mission-driven. ## Products & Services - **Appointment Booking** – 24/7 online scheduling, waitlist management, calendar optimization, reminders and delay notifications. - **Practice Efficiency (Digital Secretariat)** – Tools for patient base management, task manager, openings/absences, recall campaigns, and analytics. - **Clinical & Care Cooperation** – Electronic health records (EHR), document management, secure messaging, prescribing, billing engine, and AI assistants for documentation and decision support. - **Health Companion (Patient App)** – A mobile app offering prevention campaigns, early detection programs, personalized guidance via an AI assistant, video consultations, and messaging with professionals. - **AI Consultation Assistant** – Structured transcription of consultations; has supported 5 million consultations. - **AI Phone Assistant** – Virtual assistant handling bookings and messages 24/7. - **Financial Solutions** – Simplifies billing and insurance processes for healthcare professionals. - **Platform & APIs** – Internal platform for modular development; data import/export, CRM integrations, and partner programs. ## Market Standing - **Valuation/Market Cap**: Not disclosed (private company) - **Key Metric**: Annual Revenue EUR 257.6M (latest available); Total Funding USD 816M across 10 rounds - **Notable Investors/Partners**: General Atlantic (lead in Series E), Eurazeo (Series D lead), Accel (Series B lead), and others. Acquired Dott.it, Tanker, and Appocrate. - **Growth Signals**: - 90 million patients and 420,000 healthcare professionals use the platform. - 2,900+ employees (up from ~2,618 as per LinkedIn; monthly headcount growth +1.0%). - Operating in France, Germany, Italy, Netherlands, with presence in Switzerland and UK. - Tech team of 900+ experts; AI features deployed in production (e.g., AI Consultation Assistant used in 5M consultations). ## Competitive Advantages - **Network effects**: Large, two-sided marketplace connecting millions of patients with hundreds of thousands of professionals across Europe. - **Deep healthcare expertise**: Over a decade of experience, solutions adapted to 120+ specialties and local regulations. - **AI-first innovation**: Proprietary datasets, research lab, and production AI assistants that improve clinical efficiency. - **Trust and compliance**: Certified B Corp, ISO 27001, HDS (health data hosting) – high security and privacy standards. - **Platform modularity**: Cloud-native, distributed architecture that allows rapid adaptation to new countries and specialties. ## Strategic Focus - **AI integration**: Scaling AI Consultation Assistant, AI Phone Assistant, and AI-powered clinical decision support. - **Preventive and continuous care**: Shifting from reactive treatment to proactive health management via the Health Companion app. - **Geographic expansion**: Deepening presence in existing European markets and entering new regions. - **Platform modularization**: Building reusable components to accelerate product development and partner integrations. - **Mission-driven growth**: Maintaining B Corp status while expanding revenue and impact. ## Why Work Here - **Culture**: Mission-driven, B Corp certified, collaborative environment focused on social impact. Employees report a strong sense of purpose. - **Work policy**: Flexible – hybrid and office-based modes available. Option to work from EU countries and the UK for up to 10 days per year. - **Benefits**: - Health insurance 100% paid for employee and children. - 25 paid vacation days + up to 14 RTT days annually. - Free mental health and coaching services (Moka.care). - On-site gym with group classes (Paris office). - One additional month of parental leave on top of legal leave (Parent Care Program). - Lunch vouchers (Swile card), sports/club subsidy. - Solidarity Days (2 days/year for health charities). - **Engineering culture**: 900+ tech team, dedicated onboarding (Doctolib Academy), continuous training, access to best AI tools, and internal mobility opportunities. - **Employer rating**: 3.6/5 on LinkedIn (923 reviews) – work-life balance 3.7, culture 3.7, compensation 3.3. ## Sources 1. [careers.doctolib.com](https://careers.doctolib.com/) 2. [careers.doctolib.com/tech-doctolib](https://careers.doctolib.com/tech-doctolib/) 3. [linkedin.com/company/doctolib](https://www.linkedin.com/company/doctolib) 4. [jobsbyculture.com/companies/doctolib](https://jobsbyculture.com/companies/doctolib) 5. [welcometothejungle.com/en/companies/doctolib](https://www.welcometothejungle.com/en/companies/doctolib) ## Other roles at Doctolib - [Stage - Salesforce Support Associate (x/f/m)](https://feeny.ai/job/stage-salesforce-support-associate-x-f-m-doctolib-nantes-bzwrzvd4ncx4) — Nantes, France - [Senior AI Engineer - Search & Recommendation - Patient Team (x/f/m)](https://feeny.ai/job/senior-ai-engineer-search-recommendation-patient-team-x-f-m-doctolib-paris-yg84jjwvd764) — Paris, France - [Corporate Development Lead (x/f/m)](https://feeny.ai/job/corporate-development-lead-x-f-m-doctolib-paris-9csgr0pg1283) — Paris, France - [Senior Workplace Experience Partner (x/f/m)](https://feeny.ai/job/senior-workplace-experience-partner-x-f-m-doctolib-berlin-29b83jg39d7m) — Berlin, Germany - [Stage - Sales Development Representative (x/f/m) - décembre 2026](https://feeny.ai/job/stage-sales-development-representative-x-f-m-decembre-2026-doctolib-paris-bah40s3bz7mh) — Paris, France - [Senior Software Engineer - Node.js/TypeScript (x/f/m)](https://feeny.ai/job/senior-software-engineer-node-js-typescript-x-f-m-doctolib-berlin-wcjjmr42gmfd) — Berlin, Germany - [Account Executive terrain - Pau (x/f/m)](https://feeny.ai/job/account-executive-terrain-pau-x-f-m-doctolib-pau-pyrenees-atlantiques-m94dkzev6j3e) — Pau Pyrénées-Atlantiques, France - [Lead Product Manager - Patient Data Collection (x/f/m)](https://feeny.ai/job/lead-product-manager-patient-data-collection-x-f-m-doctolib-paris-gn18qrf2k1wz) — Paris, France - [Sales Executive im Außendienst (x/f/m)](https://feeny.ai/job/sales-executive-im-au-endienst-x-f-m-doctolib-wuppertal-north-rhine-westphalia-e1t0mqh4dsp5) — Wuppertal North Rhine-Westphalia, Germany - [Product Support Manager (x/f/m)](https://feeny.ai/job/product-support-manager-x-f-m-doctolib-nantes-csv06kpqcqvv) — Nantes, France