PSIRT Analyst

Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security.

Your Responsibilities

• Contributing to the monitoring and the triage of vulnerabilities across Vates products
• Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions
• Coordinating the correction with the product teams and monitor the remediation deadlines
• Participating in the backport effort of fixes
• Writing and publishing security advisories for Vates products

PSIRT Continuous Improvement

• Tracking recurrent vulnerabilities and provide recommendations for security improvements
• Contribute to the development of automation tools within the PSIRT
• Review and improve the process with the security team

Required Skills

• Ability to read code (C, python, etc) and understand software or network architectures
• Initial experience in security incident management and response
• Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience
• Interest in learning packaging for distributions if no previous background
• Knowledge of distribution packaging systems
• Knowledge of RPM-based distribution and their packaging system
• Good communication skills
• Problem solving mindset
• Detail-oriented

Why join us?

At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.

Location

Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort.

You are free to work 100% remotely or come on-site occasionally, depending on your preferences.

Benefits

• Health insurance coverage funded at 50% by the company
• Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)
• Employee savings plan (PEE)
• Profit-sharing scheme
• Annual bonus
• 100% remote work

As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender.

Are you passionate about cybersecurity, vulnerability analysis, and open-source software?

Do you enjoy solving complex technical problems and collaborating with development teams? Then join us!

We Are Looking For Someone With

• A master degree in computer science
• At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• Fluent in English and French.