Software Engineer - Security Features

About the role:

We are looking for a Backend Software Engineer with a strong security background to join our product development team based in Paris, which focuses on building innovative features to enrich the security protection for both our B2B and B2C users.

The goal of the team is to research and build product capabilities that improve user protection, strengthen identity and access controls, reduce security risks, and raise the overall security posture of the Dashlane experience. In this role, you will design, build, and operate backend services that power security-sensitive features, working in close partnership with product, design, infrastructure, and the Security organization.

This role is a strong fit for an engineer who has already built security-relevant product features in a SaaS environment, understands application security fundamentals, and can contribute pragmatically to secure, scalable backend systems.

Location:

You will be based in Paris, with English as your working language. At Dashlane, we embrace a hybrid culture that combines the best of both worlds: the creativity and energy of in-person collaboration with the flexibility of remote work. Our model is designed to strengthen team connections while supporting individual productivity and work-life balance. To maximize collaboration, we come together in the office on Mondays, Tuesdays, and Thursdays, while Wednesdays and Fridays offer more flexibility for focused work.

At Dashlane you will:

• Research, design, implement, and maintain backend services that support user-protection features across B2B and B2C products.

• Build features related to identity, authentication, access control, threat prevention, and other security-sensitive user journeys.

• Work closely with the Product team and the Security team to assess new opportunities, translate security requirements and risk assessments into effective product features.

• Contribute to threat modeling activities and apply security best practices throughout the software development lifecycle.

• Help improve the resilience of systems against common attack patterns such as account abuse, privilege misuse, insecure integrations, and identity-related vulnerabilities.

• Participate in architecture discussions and make pragmatic trade-off decisions that balance security, usability, maintainability, and delivery speed.

• Write high-quality, well-tested, maintainable code and support services in production with appropriate observability and operational ownership.

• Collaborate with cross-functional stakeholders to deliver security features that are technically sound and valuable to customers.

Our stack:

• Backend: Node.js, TypeScript

• Infrastructure: AWS, ECS, RDS, Redis, S3

• Tooling: GitLab, Terraform, SonarQube

• Observability: ELK, Datadog

Requirements:

• Professional experience as a backend software engineer, with hands-on delivery of production systems in a SaaS or similarly cloud-based environment.

• Strong curiosity about security-related topics

• Strong experience building features that protect users and improve product security.

• Solid understanding of application security best practices, including secure design principles and threat modeling.

• Experience working closely with a CISO, Security team, or equivalent security stakeholders.

• Proficiency in backend development with modern languages and frameworks, ideally Node.js and TypeScript.

• Experience designing APIs, integrating external systems, and operating services in production.

• Good communication skills and the ability to work effectively in a cross-functional environment, particularly with Web/Client engineers, Product Managers, and Product designers.

• Fluency in English.

We're also looking for:

• Strong knowledge in cryptography

• Familiarity with Identity and Access Management frameworks and protocols, such as Passkeys, SAML, OAuth, SCIM, or similar experience in working with other security-related features

• Experience building enterprise security features for administrators and managed business environments.

• Experience with authentication hardening, account recovery flows, access governance, or fraud and abuse prevention.

• Familiarity with modern passwordless authentication patterns and user identity lifecycle management.

• Experience contributing to security reviews, incident follow-ups, or remediation plans.

• Exposure to consumer-scale and business-scale product constraints in the same environment.

What success looks like:

• You deliver backend capabilities that measurably improve user protection and security outcomes.

• You contribute to a strong engineering partnership with the Security organization from early design through production rollout.

• You help the new team establish high standards for secure development, system ownership, and practical execution.

• You make complex security topics understandable to non-specialists and help turn them into product value.