We're a product-first team on a mission to help grow the cybersecurity culture 🔐
We want to instill cybersecurity good practices to employees in a way that's actually effective, and entertaining enough so that employees don't feel like they're working. Think Duolingo but for cybersecurity.
We created a platform to easily rollout a cybersecurity awareness program: the platform sends chat-based 4-minutes long courses to teams. Following the courses, the other side of the platform simulates phishing attacks, to prepare employees to face hackers but in a safe environment.
Created in 2020, Riot has raised $45m with top-notch investors (Y Combinator, Base10, Funders Club and Frst Capital), and is now protecting more than 2,000,000 employees in over 2,000 companies (including Intercom, Deel and Deezer) all over the world.
Cybersecurity is everywhere. It's impacting everyone, everyday, and it's becoming the number one risk to any organization, whether it's a small business or a big firm. Yet, the cybersecurity culture in most companies is a disaster. Hackers are leveraging this by targeting the weakest link: the employees. We're on a mission to fix that.
You will join our Platform squad. In this role, you will be responsible for building, scaling and securing the infrastructure that powers Riot's products and enables every other team to ship fast and safely. Engineers at Riot are strongly involved in product and architecture decisions, and our DevOps work is no exception: you'll have a real say on the strategic technical choices we make.About the role
Finalize the transition to a fully Terraform-managed infrastructure, reproducible, cleanly structured and well-organized
Lead the reflection on ECS vs Kubernetes: needs analysis, pros/cons, and decision on a potential migration
Security hardening: drive best practices and strengthen our overall security posture (ISO 27001 in progress)
Long-term goal: be able to deploy fully independent infrastructure on demand, notably to support our expansion to the US market
Improve developer experience: better CI, faster deployments, cleaner onboarding/offboarding processes
FinOps: rationalize cloud costs while keeping a high bar on quality and reliability
Stack
AWS: ECS Fargate today, potential move to Kubernetes (you'll be part of that decision)
Database: Aurora PostgreSQL
Monitoring: Datadog
CI: GitHub Actions
IaC: Terraform with Atlantis
Backend: 2 monoliths — one in Elixir (new), one in Node.js / TypeScript / NestJS (legacy, to sunset within a year)
=> We're still iterating on some infra-related technical choices (ECS vs Kubernetes, Atlantis vs alternatives, etc.). Whoever joins will be a key voice in these discussions.
The goal is to pick the best technologies that serve our business needs.
About you
You're a doer. That's core to Riot's culture
You have 4+ years of experience in DevOps / Platform / SRE roles
Strong AWS culture, hands-on with Terraform, comfortable with IaC at scale
Pragmatic over dogmatic: you pick the right tool for the job, not the trendy one
You've operated user-facing infrastructure with zero-downtime deployments
You're autonomous, proactive, and able to take ownership of complex topics
Security-minded: you naturally think about hardening, secret management, and compliance
You're not a security engineer but you're comfortable contributing to ISO 27001 / SOC 2 efforts
You don't need to be an expert on cybersecurity, but you need to be motivated by the mission
You're based in Paris or you're willing to relocate
Process
First call with Thomas, our Tech Talent Acquisition Manager (30min)
Hiring manager call with Adrien, Engineering Manager Platform (30min)
Onsite interview: case study + experience deep-dive with the team (2h)
Fit interview with our CTO & CEO (30 + 30min)