Cybersecurity Offensive Analyst

Job Description

As a cybersecurity pentester and auditor, you are executing technical evaluations of complex system environments in the context of R&D product developments and customer delivery programs. You will identify vulnerabilities and propose remediation actions. You may have to use different types of security assessment depending on the perimeter (pentest, code review, configuration audit, etc.).

• Perform penetration tests on Web applications and APIs
• Analyze mobile applications (Android/iOS)
• Work on embedded/IoT security pentests (firmware analysis, basic hardware interface exploration)
• Detect and validate vulnerabilities
• Document findings clearly and present them in a technical report
• Collaborate with project teams to help validate fixes
• Participate at Cybersecurity conferences and CTF
• Develop internal tools used for pentest

Qualifications and Profile

For this position, we seek a candidate with the following skills set:

Technical Skills

• Knowledge of embedded pentesting techniques
• Vulnerability research in binaries (e.g., memory manipulation)
• Methodology to pentest an embedded operating system
• Reverse engineering
• Hardware attacks
• Knowledge of web application pentest techniques
• Knowledge of mobile application pentest techniques (Android and iOS)
• Operating system intrusion in Linux (embedded or not); Windows is a plus
• Network protocol security and ability to perform network attacks
• Applicative layer security
• Scripting – Technology watch and security trends study

Soft Skills

• Synthetic mind with ability to vulgarize to non‑technical audience
• Good writing skills for different levels of stakeholders
• Passionate about hacking with an ethical hacker mindset (e.g., participating in CTF or performing challenges)
• Capacity to work as a team
• Rigor
• Autonomy

Education & Experience

• Bac +5, Engineering school
• 0 to 3 years in cybersecurity involving embedded security pentesting

Languages

• French
• English