Senior Data & AI Security Engineer, Data and Agentic Platform

Team Leadership & Support: Lead, mentor and grow the security team; prioritize and distribute tasks and provide support to stakeholders across the organization. Access & Policy Governance: Design and enforce GCP access controls; detect and remediate excessive roles & access to enforce least privilege. Security by Design & Architecture: Embed security into the Data Platform lifecycle and Enterprise security architecture standards for solutions & services. Monitoring & Compliance: Operate advanced monitoring & alerting to detect compliant / non-compliant resources and drive remediation. Threat Protection & Data Leak Prevention: Harden GCP, respond to security events and enforce DLP controls to prevent data leaks and exfiltration. DRP & Resilience: Define, maintain and regularly test backups and Disaster Recovery Plans (DRP) to guarantee business continuity. Agentic Platform Security: Secure the Agentic AI Platform: agent access, authentication, MCP assessment and guardrails. Code Review & Innovation: Run rigorous code reviews, challenge designs and drive AI-driven automation and security innovation. Policy Enforcement: Communicate and enforce security policies & guidelines across all Zones, Métiers and Divisions of the Group.

You are a hands-on cloud security expert and technical leader who serves as the go-to reference for the organization. You think like an attacker—proactively investigating incidents and staying ahead of threats—while keeping a clear view of enterprise architecture aligned with business goals. You are deeply technical: you review code with rigor to raise the bar, champion security-as-code and AI-driven automation, and bring specific experience in securing AI and agentic systems. Collaborative and direct, you easily bridge Group Cybersecurity, Zones, Métiers, and Divisions to drive security adoption at scale. More specifically we are looking for: 7+ years’ experience in cloud security or security engineering, including at least 2 years leading a technical team, with strong hands-on skills in GCP and Python. GCP & Data Security: Deep knowledge of IAM, VPC-SC, Security Command Center, KMS/CMEK, Secret Manager,BigQueryaccess controls, data loss prevention (DLP), and remediation of excessive access. Resilience & Data Protection: Experience designing disaster recovery, business continuity, and data leak prevention/exfiltration controls. Infrastructure-as-Code: Strong background in Terraform, OPA/Rego policy-as-code, and CI/CD workflows, with a commitment to enforcinghigh standardsthrough rigorous code reviews. Monitoring & AI Security: Familiarity with security tools like Cloud Audit Logs, Google SecOps, and SIEMs, combined with practical experience securing AI systems (agent auth, guardrails, and MCP assessments). Leadership & Collaboration: A track record of mentoring teams, prioritizing work, and driving policy adoption across diverse business units (Zones, Métiers, and Divisions). Relevant certifications like GCP PCSE, CISSP, or CISM are a plus. Who We Are L’Oréal is present in 150 markets on five continents. For more than a century, L’Oréal has devoted itself solely to ‘Create beauty that moves the world’; it is now the industry world leader with €42 billion consolidated sales. Together, we solve complex challenges at scale, while making sure we stay committed to making the world a more inclusive and a better place for everyone & our planet. Today, L’Oréal includes over 9k experts in beauty tech, digital, data and e-comm and is constantly growing. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future. To achieve this ambition, L’Oréal continues to recruit diverse, innovative, skilled, and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications, and Infrastructure. We’re committed to guaranteeing inclusive recruitment processes and to advocating for hiring and promoting each candidate in an ethical and equitable way. The Group strictly prohibits discrimination against any applicant for employment because of the individual’s gender identity or expression, sexual orientation, visible and/or invisible disabilities, socio-economic and/or multicultural origins, health conditions, age, religion, or any other characteristics protected by law.