PSIRT Analyst

VATES; Grenoble; Remote; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Health insurance 50% funded

Works Council benefits

Employee savings plan (PEE)

Annual bonus

Job summary

Vates is a French software company specializing in Open Source and virtualization, with a strong commitment to open and collaborative development. Our PSIRT Analyst role focuses on analyzing vulnerabilities, coordinating fixes with development teams, and publishing security advisories.

You will help secure XCP-ng and Xen Orchestra solutions, track CVEs, and contribute to automation and process improvements in a fully remote-friendly environment based in Grenoble or Paris, with optional on-site

Qualifications

• Experience in security incident management and response.
• Knowledge of CWE / MITRE ATT&CK.
• Interest in learning packaging for distributions.
• Knowledge of RPM-based distributions.

Responsibilities

• Monitor and triage vulnerabilities across Vates products.
• Analyze vulnerabilities and provide severity assessments.
• Coordinate fixes with product teams and monitor remediation deadlines.
• Backport fixes where applicable.
• Write and publish security advisories for Vates products.
• Track recurring vulnerabilities and provide security improvement recommendations.
• Contribute to automation tools within PSIRT.
• Review and improve security processes with the team.

Skills

Code reading

Incident management

Vulnerability knowledge

Packaging knowledge

Distribution packaging

RPM packaging

Problem solving

Detail oriented

Education

Master in Computer Science

Job description

Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security.

Your Responsibilities

Follow product security incidents :

• Contributing to the monitoring and the triage of vulnerabilities across Vates products
• Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions
• Coordinating the correction with the product teams and monitor the remediation deadlines
• Participating in the backport effort of fixes
• Writing and publishing security advisories for Vates products
• Tracking recurrent vulnerabilities and provide recommendations for security improvements
• Contribute to the development of automation tools within the PSIRT
• Review and improve the process with the security team

Required Skills

• Ability to read code (C, python, etc) and understand software or network architectures
• Initial experience in security incident management and response
• Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience
• Interest in learning packaging for distributions if no previous background
• Knowledge of distribution packaging systems
• Knowledge of RPM-based distribution and their packaging system
• Problem solving mindset
• Detail-oriented

At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.

Location

Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort.

You are free to work 100% remotely or come on-site occasionally, depending on your preferences.

• Health insurance coverage funded at 50% by the company
• Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)
• Employee savings plan (PEE)
• Annual bonus

As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender.

Profile required

Are you passionate about cybersecurity, vulnerability analysis, and open-source software?

Do you enjoy solving complex technical problems and collaborating with development teams ? Then join us !

We are looking for someone with:

• A master degree in computer science
• At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• Fluent in English and French.

Company description

Vates is a French software company specializing in Open Source and virtualization, with a strong commitment to open and collaborative development. Our main projects, Xen Orchestra and XCP-ng, cover the entire virtualization stack - from the hypervisor (Xen) and the virtualization platform (XCP-ng) to virtual machine management and backup (Xen Orchestra).

Our team is distributed across several countries and fully embraces remote work, with transparent working methods and accessible communication channels. At Vates, we are driven by a people-centered company culture focused on kindness, inclusivity, and a flat organizational structure. Every team member is encouraged to contribute ideas, make decisions, and grow with the company.

Our Open Source model is at the core of everything we do - not only in our code, available on GitHub and GitLab, but also in our collaborative approach with the community. We believe in an "upstream first" philosophy, and we dedicate our expertise and resources to fundamental projects such as Xen, while supporting contributors of all levels in joining us on this journey.