Cybersecurity Offensive Analyst

IDEMIA Public Security; Courbevoie; Sur place; EUR 45 000 - 65 000; Plein temps

Résumé du poste

IDEMIA Public Security in Courbevoie, Île-de-France, is seeking a cybersecurity pentester and auditor to perform technical evaluations of complex system environments in R&D and customer delivery programs. You will identify vulnerabilities and propose remediation actions, using various security assessments such as pentests, code reviews, and configuration audits.

Responsibilities include performing penetration tests on Web applications and APIs, analyzing mobile apps, embedded/IoT pentests, and

Qualifications

• Knowledge embedded pentesting techniques.
• Vulnerability research in binaries and memory manipulation.
• Methodology to pentest an embedded operating system.
• Reverse engineering capabilities.
• Hardware attack knowledge.
• Web and mobile pentest techniques.
• Linux (embedded) intrusion knowledge; Windows a plus.
• Network protocol security and attacks.
• Scripting and security trend monitoring.
• Synthetic mind with ability to vulgarize for non-technical audiences.
• Strong writing skills for stakeholders.
• Ethical hacker mindset and CTF participation.

Responsabilités

• Perform penetration tests on Web applications and APIs.
• Analyze mobile applications (Android/iOS).
• Work on embedded/IoT security pentests (firmware analysis, basic hardware interface exploration).
• Detect and validate vulnerabilities.
• Document findings clearly in a technical report.
• Collaborate with project teams to help validate fixes.
• Participate at Cybersecurity conferences and CTF.
• Develop internal tools used for pentest.

Connaissances

Embedded pentesting

Vulnerability research

Reverse engineering

Hardware attacks

Web application pentesting

Mobile application pentesting

Linux intrusion

Network security testing

Scripting

Team collaboration

Autonomy

Rigor

Communication skills

English proficiency

French proficiency

Formation

Bac +5, Engineering school

Description du poste

As a cybersecurity pentester and auditor, you are executing technical evaluations of complex system environments in the context of R&D products developments and customer delivery programs. You will identify vulnerabilities and propose remediation actions. You may have to use different types of security assessment depending on the perimeter (pentest, code review, configuration audit, etc.)

• Perform penetration tests on Web applications and APIs
• Work on embedded/IoT security pentests (firmware analysis, basic hardware interface exploration)
• Detect and validate vulnerabilities
• Document findings clearly and present them into a technical report
• Collaborate with project teams to help validate fixed
• Participate at Cybersecurity conferences and CTF
• Develop internal tools used for pentest

Job description

As a cybersecurity pentester and auditor, you are executing technical evaluations of complex system environments in the context of R&D products developments and customer delivery programs. You will identify vulnerabilities and propose remediation actions. You may have to use different types of security assessment depending on the perimeter (pentest, code review, configuration audit, etc.)

• Perform penetration tests on Web applications and APIs
• Analyze mobile application (Android/iOS)
• Work on embedded/IoT security pentests (firmware analysis, basic hardware interface exploration)
• Detect and validate vulnerabilities
• Document findings clearly and present them into a technical report
• Collaborate with project teams to help validate fixed
• Participate at Cybersecurity conferences and CTF
• Develop internal tools used for pentest

Profile description

• Required technical skills: Knowledge embedded pentesting techniques
• Vulnerability research in binaries e.g. memory manipulation
• Methodology to pentest an embedded operating system
• Reverse engineering
• Hardware attacks
• Knowledge of web application pentest technique
• Knowledge of mobile application pentest technique: Android and iOS
• Operating system intrusion in Linux (embedded or not), windows is a plus
• Network protocol security: capable of performing network attacks
• Applicative layer security
• Scripting Technology watch and security trends study
• Required Soft-skills: Synthetic mind with ability to vulgarize to non-technical public
• Good writing skills for different levels of stakeholders
• Passionate by hacking with ethical hacker mindset e.g. participating to CTF, or performing challenges
• Capacity to work as a team
• Rigor
• Autonomy
• Education: Bac +5, Engineering school
• Experience: 0 to 3 years in cybersecurity involving embedded security pentesting
• Language: French, English