PSIRT Analyst

Vates VMS; Grenoble; Remote; EUR 60,000 - 92,000; Full time

Benefits offered by this job

Health insurance

Benefits provided by Works Council

Employee savings plan (PEE)

Profit-sharing scheme

Annual bonus

100% remote work

Job summary

VATES, a French software company, seeks a PSIRT Analyst to secure XCP-ng and Xen Orchestra by analyzing vulnerabilities and coordinating fixes with development teams.

You will monitor vulnerabilities across VATES products, assess severity, and publish advisories. The role supports remote work with office options in Grenoble or Paris, and includes a 100% remote model.

Qualifications

• Master's degree in computer science or equivalent.
• At least 3 years experience in a R&D security team or CERT/CSIRT focusing on AppSec.
• Fluent in English and French.

Responsibilities

• Contributing to the monitoring and triage of vulnerabilities across Vates products.
• Analyzing vulnerabilities and providing accurate severity assessments for decision making.
• Coordinating fixes with product teams and monitoring remediation deadlines.
• Participating in the backport effort of fixes.
• Writing and publishing security advisories for Vates products.
• Track recurrent vulnerabilities and propose security improvements.
• Develop automation tools within PSIRT and improve processes with the security team.

Skills

Code reading

Security incident management

CWE/MITRE ATT&K knowledge

Distribution packaging

RPM packaging

Communication skills

Problem solving

Detail-oriented

Education

Master's degree in computer science

Job description

Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security.

Your Responsibilities

• Contributing to the monitoring and the triage of vulnerabilities across Vates products
• Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions
• Coordinating the correction with the product teams and monitor the remediation deadlines
• Participating in the backport effort of fixes
• Writing and publishing security advisories for Vates products

PSIRT Continuous Improvement

• Tracking recurrent vulnerabilities and provide recommendations for security improvements
• Contribute to the development of automation tools within the PSIRT
• Review and improve the process with the security team

Required Skills

• Ability to read code (C, python, etc) and understand software or network architectures
• Initial experience in security incident management and response
• Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience
• Interest in learning packaging for distributions if no previous background
• Knowledge of distribution packaging systems
• Knowledge of RPM-based distribution and their packaging system
• Good communication skills
• Problem solving mindset
• Detail-oriented

Why join us?

At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.

Location

Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort.

You are free to work 100% remotely or come on-site occasionally, depending on your preferences.

Benefits

• Health insurance coverage funded at 50% by the company
• Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)
• Employee savings plan (PEE)
• Profit-sharing scheme
• Annual bonus
• 100% remote work

As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender.

Are you passionate about cybersecurity, vulnerability analysis, and open-source software?

Do you enjoy solving complex technical problems and collaborating with development teams? Then join us!

We Are Looking For Someone With

• A master degree in computer science
• At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• Fluent in English and French.