Product Security Engineer

Fortinet, Inc.; France; Sur place; EUR 35 000 - 45 000; Plein temps

Résumé du poste

A leading cybersecurity company is seeking an entry-level Product Security Engineer to join their Product Security Incident Response Team (PSIRT). This role involves handling product security incidents and performing vulnerability research on Fortinet products. Ideal for candidates passionate about security, training will be provided by peers. Applicants must be detail-oriented and have a strong understanding of C programming and cryptography.

Qualifications

• Excellent understanding of asymmetric cryptography and C language.
• Detail-oriented with knowledge of vulnerability scanning tools.
• Good understanding of Fortinet products preferred.

Responsabilités

• Support management of PSIRT incidents and ensure timely handling.
• Triage incidents, test for vulnerabilities, and escalate when needed.
• Find and report unknown vulnerabilities via various analysis methods.

Connaissances

Asymmetric Cryptography

Scripting Knowledge

C Language Proficiency

Detail Oriented

Vulnerability Scanning

Pentesting Methodologies

Fuzzing Tools

Formation

BS in Computer Science

MS in Computer Science

Description du poste

Job Description

Product Security Engineer - must be fluent in English

The Product Security Incident Response Team (PSIRT) is looking for a Product Security Engineer, to handle Product Security related incidents, and to perform vulnerability research on Fortinet products.

This is an entry level role, ideal for someone looking to enter the PSIRT and threat research industry.

On the job training by peers will be provided.

We are seeking someone who is very people curious and/or passionate about security.

Responsibilities:

• Support the management of the PSIRT incidents, from start to finish, and ensure they are handled in a timely manner
• Triage incidents, answer questions they may raise, test for vulnerabilities they may signal, investigate source code and create (then follow up on) Incidents on the Incident Management System when necessary.
• Escalate to senior analyst when incident falls out of the field of competence/knowledge.
• Find and report unknown vulnerabilities in Fortinet products via black box analysis, fuzzing, and source code auditing.

Skills and Experience:

• Good understanding of Fortinet products line-up would be advantageous along with a solid security background/ understanding.
• From your studies and education you will have an excellent understanding of asymmetric cryptography, scripting knowledge, high proficiency in C language, must be detail oriented and able to follow processes thoroughly.
• Good understanding of vulnerabilities at source-code level and some experience in vulnerability scanning tools. Experience in pentesting methodologies and/or fuzzing tools a plus.

Education:

• BS in Computer Science or equivalent preferred.
• MS in Computer science preferred

Due to the nature of the position, we can only accept candidates from the EU OR the right to work in France.

#LI-NC1