---
title: 'Senior Security Engineer at Kestra Technologies'
canonical: 'https://feeny.ai/job/senior-security-engineer-kestra-technologies-europe-wm5gfeyj44cw'
type: 'job'
last_seen: '2026-10-16'
---

# Senior Security Engineer at Kestra Technologies

- **Company:** Kestra Technologies
- **Location:** Europe
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-18
- **Last confirmed live:** 2026-10-16
- **Apply:** https://jobs.ashbyhq.com/kestra/48a6eb68-1ff3-4947-89e5-324831c22859

## Job description

## About Kestra

Kestra is the universal orchestration platform: open source, declarative, and designed to orchestrate data pipelines, IT automation, business workflows, and AI/agentic systems. Trusted by over 10,000 organizations worldwide, including JPMorgan Chase, Bloomberg, FILA, and Crédit Agricole, Kestra orchestrates mission-critical workloads at scale. The open-source project has close to 30,000 GitHub stars, hundreds of contributors, and a fast-growing global community.

## About the role

Kestra runs arbitrary, user-defined code at scale. Our users write workflows that execute scripts, containers, and queries against their own production systems, through hundreds of community-built plugins, on a platform whose entire source code is public. That is an unusually rich attack surface, and securing it is a genuinely hard engineering problem rather than a checklist exercise. You would be our first dedicated security hire. We're looking for a Senior Security Engineer to own and elevate the end-to-end security posture of our platform, infrastructure, and open-source ecosystem. This is a unique, hybrid role for someone who excels at both sides of security: actively breaking systems to find vulnerabilities (hands-on penetration testing) and actively fixing them (opening PRs, patching infrastructure, and managing supply chain risks). If you want to build a world-class security foundation for a fast-growing open-source and SaaS platform, this role is for you. This is a hands-on engineering role, not a GRC or compliance one.

## What you would do

Your first six months would focus on the first three points below. The rest is where the role grows.

- Conduct hands-on penetration testing and threat modeling across our web application, APIs, control plane, and cloud environments.
- Manage end-to-end vulnerability tracking across our codebases, software dependencies (SCA), container images, and cloud infrastructure.
- Proactively fix security flaws by writing patches, submitting Pull Requests (PRs), or collaborating directly with product teams to guide remediation.
- Audit and harden our cloud infrastructure (GCP, Kubernetes clusters, and networking configurations) against external and internal threats.
- Automate security tooling into our CI/CD pipelines (SAST, DAST, dependency scanners) to catch CVEs before code reaches production.
- Perform security code reviews and evaluate third-party dependencies, open-source integrations, and supply-chain risks.
- Lead incident response efforts and establish continuous monitoring, detection, and mitigation strategies.
- Own our public security posture as an open-source project: vulnerability disclosure process, CVE handling, security advisories, and the trust model of our plugin ecosystem.

Our Tech Stack

- Security & Vulnerability Tools: Trivy, GitHub Security / Dependabot, Elastic Security
- Infrastructure: Docker, Kubernetes, Terraform
- Cloud: GCP
- Programming language: Java, Typescript, Javascript
- Datastore: PostgreSQL, Elasticsearch
- Queuing: Redis, Kafka, AMQP
- Monitoring & Logs: ELK, Prometheus, Grafana
- Deployment & Repository: GitHub Actions, ArgoCD

## What we are looking for

- 5+ years of experience in Security Engineering, Product Security, DevSecOps, or a combined Offensive/Defensive role.
- Strong hands-on penetration testing background, with proven ability to discover application, API, and network-level vulnerabilities.
- A builder/fixer mindset: You don't just export scanner PDFs; you can read code, understand exploits, write fixes, or provide clear remediation steps to engineers.
- Deep familiarity with cloud security (AWS or GCP) and containerized environments (Kubernetes, Docker).
- Experience with dependency and supply-chain security (CVE management, open-source licensing, SCA tools).
- Fluent in English and comfortable working autonomously in a fully remote environment.
- Adaptability to a fast-paced open-source startup environment where pragmatism and execution speed matter.

## Perks & Benefits

- Work from anywhere: We’re a remote-first company, so you can work from wherever feels like home. Plus, you’ll have access to coworking spaces worldwide if you ever need a change of scenery.
- Health coverage: From medical support, dental, and vision, we've got you covered.
- Home office setup on us: We’ll provide all the equipment you need to work comfortably.

Our Hiring Process We aim to move quickly (2-3 weeks), but we can adjust the timeline if needed.

- Intro call with the hiring manager (30 min)
- Technical scenario / Practical assessment (2 hours, asynchronous homework focusing on threat assessment and remediation)
- Team chat with one of your future colleagues (30 min)
- Final discussion with one of our co-founders (30 min)

## About Kestra Technologies

## Company Overview
- **One-liner**: Kestra is the open-source declarative orchestration platform for data, AI, and infrastructure workflows, designed to unify automation across any language and infrastructure.
- **Entity Type**: Private (Series A)
- **Headquarters**: Paris, France
- **Founded**: 2021
- **Founders**: Emmanuel Darras (CEO), Ludovic Dehon (CTO)

## Core Business
- **Primary industry/industries**: Workflow Orchestration, Data Infrastructure, Developer Tools, AI Operations
- **Target customers**: B2B – Data engineers, platform engineers, software engineers, and enterprise IT teams
- **Mission or purpose statement**: "Unify orchestration for all engineers. Build, run and govern all your workflows — data, AI, infrastructure, and business — Everything-as-Code, from the UI and with AI."

## Products & Services
- **Kestra Open Source**: A free, self-hosted orchestration engine (Apache 2.0 license) that runs on Docker or Kubernetes. Workflows are defined in declarative YAML, support any language (Python, Bash, Node.js, Go, containers), and connect to 1,600+ plugins.
- **Kestra Cloud**: A fully managed SaaS version of the platform, offering fast time-to-value with pay-as-you-go pricing.
- **Kestra Enterprise Edition**: Built for critical environments with SSO, RBAC, audit logs, multi-tenancy, isolated workers, SLA-backed support, and hybrid deployment (cloud, on-prem, air-gapped). Includes AI Copilot for natural-language workflow generation and agentic orchestration.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed
- **Key Metric**: Total funding of $36M across three rounds (Pre-Seed $3M, Seed $8M, Series A $25M)
- **Notable Investors**: RTP Global (led Series A), Alven (led Seed round), and a roster of prominent angel investors including Clément Delangue (CEO, Hugging Face), Nicolas Dessaigne (Founder, Algolia / YC Partner), Olivier Pomel (CEO, Datadog), Tristan Handy (CEO, dbt Labs), Michel Tricot (CEO, Airbyte), Pierre Burgy (CEO, Strapi), Bertrand Diard (Co-Founder, Talend), Stijn Christiaens (Co-Founder, Collibra), and Frédéric Plais (CEO, Platform.sh).
- **Growth Signals**: 10x year-over-year growth in adoption and workflow volume; 48.8% headcount growth YoY (46 employees as of mid-2025); 24 active job postings; team distributed across 10 countries.

## Competitive Advantages
- **Unified orchestration**: Replaces multiple legacy tools (Airflow, Prefect, Dagster, CI/CD schedulers, cron) with a single platform for data, AI, and infrastructure workflows – reducing tooling cost by up to 90%.
- **Declarative YAML + UI**: Workflows are version-controlled YAML, but can also be built in a UI (no-code forms) – both stay in sync, enabling collaboration between developers and non-developers.
- **AI-native**: Built-in production AI Copilot generates/refines workflows from natural language, and AI Agents with memory and tools can dynamically adapt execution.
- **API-first / CI/CD native**: Fully programmable via API and Terraform, enabling Git-driven CI/CD for workflow deployment.
- **Enterprise governance**: Retries, timeouts, SLAs, RBAC, audit logs, SOC 2, and isolated task runners – built for production reliability.

## Strategic Focus
- **Agentic automation**: Deepening AI-native capabilities with context-aware agents that can loop, adapt, and make decisions mid-workflow.
- **Enterprise adoption**: Scaling the Enterprise Edition with enhanced governance, multi-tenancy, and hybrid/air-gapped deployments for regulated industries (banking, defense, healthcare).
- **Ecosystem expansion**: Growing the plugin library (1,600+) and blueprints (250+) to connect with more data, cloud, and SaaS tools.
- **Global team growth**: Hiring aggressively (24 open roles) across engineering, sales, customer operations, and marketing, with a remote-first, distributed structure.

## Why Work Here
- **Remote-first**: Fully distributed team – work from anywhere (employees in 10 countries including France, US, UK, Germany, India, Serbia, Spain, Slovenia, Nigeria, Ireland).
- **Flexible hours**: "Flexibility in schedule to be there for life’s important moments" – strong emphasis on work/life balance with a generous vacation policy.
- **Comprehensive benefits**: Premium medical, dental, and vision coverage for employees and dependents; hardware/software costs covered; home office or coworking space budget.
- **Engineering culture**: Open-source, developer-first ethos with a flat, transparent team. High autonomy and ownership – "empower engineers to orchestrate any workflow, in any language, on any infrastructure."
- **Growth trajectory**: Fast-growing startup (10x YoY adoption, 48.8% headcount growth) – opportunity to shape the product and culture early. Backed by top-tier founders and VCs.
- **High-impact roles**: Currently hiring for Lead Java Engineer, Senior Full-Stack Engineer, Head of Sales, Developer Advocate, Product Manager, QA Engineer, and more.

## Sources
1. [kestra.io](https://kestra.io/)
2. [kestra.io/about-us](https://kestra.io/about-us)
3. [kestra.io/careers](https://kestra.io/careers)
4. [jobs.ashbyhq.com/kestra](https://jobs.ashbyhq.com/kestra)
5. [linkedin.com/company/kestra](https://www.linkedin.com/company/kestra)
6. [TechCrunch: Kestra raises $8M seed](https://techcrunch.com/2024/09/23/kestra-is-an-open-source-data-orchestration-platform-for-complex-workflows/)
7. [TechCrunch: Kestra raises $25M Series A](https://techcrunch.com/2026/03/01/kestra-raises-another-8m-for-its-open-source-orchestration-platform/)

## Other roles at Kestra Technologies

- [People & Talent Lead](https://feeny.ai/job/people-talent-lead-kestra-technologies-europe-1s428twaqkfz) — Europe
- [Senior Demand Generation Manager](https://feeny.ai/job/senior-demand-generation-manager-kestra-technologies-united-states-s974nghybwsj) — United States
- [Enterprise Account Executive](https://feeny.ai/job/enterprise-account-executive-kestra-technologies-united-states-cgsewkkhsqb6) — United States
- [Account Executive](https://feeny.ai/job/account-executive-kestra-technologies-germany-3sxgjap45azn) — Germany
- [Senior Field Engineer, France](https://feeny.ai/job/senior-field-engineer-france-kestra-technologies-france-61gm0vr5w0wv) — France
- [Senior Business Development Representative](https://feeny.ai/job/senior-business-development-representative-kestra-technologies-united-states-xt750qc2b918) — United States
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-qube-research-technologies-london-1tmh1ythpq6k) — London, United Kingdom
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-supercell-helsinki-5c0gyawbrwes) — Helsinki, Finland
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-clarity-innovations-remote-f8sbf4sgc2xx)
- [Senior Security Engineer](https://feeny.ai/job/senior-security-engineer-ultraviolet-cyber-arlington-y8x999w9gjfq) — Arlington, VA