About GitGuardian
GitGuardian is a global cybersecurity scale-up. The company is based in Paris, New-York City, Boston.
Our early investors include Scott Chacon, co-founder of GitHub, and Solomon Hykes, co-founder of Docker, alongside leading US and European VC firms. We raised our Series C in early 2026
GitGuardian leads the way in securing the credential layer, helping organizations protect the secrets that let code, machines, and AI agents access systems with broad detection, identity context, and remediation at scale. Already trusted by 600K+ developers worldwide and by 50 of the Fortune 500!
About your team and mission
Most recent supply-chain attacks start the same way: an attacker steals secrets from a developer’s laptop. A developer machine can no longer be treated as a safe place, and security teams have almost no visibility on it.
The Endpoint team is building GitGuardian’s answer to that problem: a new product that scans developer machines for secrets and AI agent configurations, then reports everything to a central platform where security teams track their posture over time and give developers the tools to fix issues themselves.
The first version works, runs daily on developer machines and is being tested by our first customers. Feedback is strong, and the next challenge is to turn it into a product we deploy at scale. It is also the first time GitGuardian ships software that runs directly on customer endpoints, which is why we are looking for engineers who know this environment.
You will join a team of 4 senior engineers with complementary profiles (Rust, web), managed by an Engineering Manager. The team is growing fast: 4 more engineers will join in the coming months.
Your main mission will be to:
Build the endpoint agent: a lightweight program running continuously on macOS, Linux and Windows, detecting secrets and risky configurations and reporting them when needed.
Own the delivery constraints of software installed on end-user machines: updates, OS permissions, CPU and memory footprint, and the security risks specific to this environment.
Contribute to ggshield, our open-source CLI, which is the foundation of the endpoint product : https://github.com/GitGuardian/ggshield
Design how we ingest, structure and expose the data collected from thousands of machines, together with the engineers working on the web platform.
Move fast to reach commercial success, while making architecture choices that will not block the product later.
Use AI in your own workflow to ship faster and review better.
Technical environment
Backend: Python + Django, RabbitMQ, Redis
DB: PostgreSQL, ClickHouse
Frontend: React / Typescript
Deployment: Kubernetes, Docker, Terraform, AWS
About you
If you think you match at least 70% of these criteria, please apply!
Here's what we consider essential for success in this role:
You have 3+ years of software engineering experience, ideally 5+.
You write production-grade Rust: ownership model, async, idiomatic error handling, and you have shipped multi-platform binaries.
You have delivered software installed on end-user machines (agent, desktop app, CLI distributed at scale): you know how to handle updates, OS permissions on macOS, Linux and Windows, and resource footprint.
You think product and business impact first: you prioritize what moves the needle for customers.
You are a self-starter: you take ownership of topics end to end and identify problems before being asked.
You are pragmatic and hands-on: you ship, then iterate.
You communicate clearly in English, written and oral, and share knowledge with your team.
You use AI tools in your daily development workflow, or you are eager to.
The following skills would strengthen your application but aren’t required:
You have worked on EDR, endpoint security or security agents.
You have experience with Python, including web frameworks (Django, FastAPI, Flask).
You have built production web applications and APIs.
You have designed large-scale data models and storage for high-volume ingestion.
You speak French.
The interview process
1. Video call with a Talent Acquisition team member
To discover your professional project and evaluate if there could be a mutual match.
2. Technical interview
To evaluate your skills for the position and project yourself into the role.
3. Team interview / Interview with your future manager
To know more about yourself and your achievements, and present to you the team.
4.1 Final interview with an Executive Manager
To detail our company’s vision and ambitions for the next couple of years.
4.2 References check
You can start thinking about two contacts who can attest to your previous or current professional experiences. These contacts should be as recent as possible, and we will call them at the end of the process.
Benefits
💰 Package that includes stock-options
🍜 Sponsored lunch voucher (Swile)
👟 Sponsored Wellpass (gymlib)
🏥 Non-charged health insurance for children (Sidecare / Generali)
💻 Up to €300 to improve your home office set-up
🌴 Yearly holiday allowance
🎡 Team building: monthly budget dedicated to each employee that you can spend as you wish, with colleagues (latest examples to date: Michelin star restaurant, karaoke, stand-up show, kitesurfing week-end, ...)
And also...
🏡 Remote policy: hybrid (3 days/week at the office in Paris)
🤖 Full, company-wide access to cutting-edge AI tools to stay ahead of the curve
📈 Opportunities for career development in the long term
🤝 Referral bonus of 4000€ for any new Guardian we might hire thanks to you
