PSIRT Analyst

Vates SAS; Grenoble; Remote; EUR 60,000 - 75,000; Full time

Benefits offered by this job

Health insurance

Works Council benefits

Employee savings plan (PEE)

Annual bonus

Job summary

Vates is seeking a PSIRT Analyst to secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to continuous product security improvements.

You will monitor vulnerabilities, provide severity assessments, backport fixes, write advisories, and help automate PSIRT workflows within a cutting-edge open-source virtualization company. Remote-friendly with flexible schedules.

Qualifications

• Master's degree in computer science.
• At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• Fluent in English and French.

Responsibilities

• Contribute to monitoring and triage of vulnerabilities across Vates products.
• Analyze vulnerabilities and provide accurate severity assessments to help the product team.
• Coordinate the correction with product teams and monitor remediation deadlines.
• Participate in backporting fixes.
• Write and publish security advisories for Vates products.
• Track recurrent vulnerabilities and provide security improvement recommendations.
• Contribute to developing automation tools within the PSIRT.
• Review and improve processes with the security team.

Skills

Code reading

Incident management

Vulnerability knowledge

Packaging systems

RPM packaging

Problem solving

Detail oriented

Education

Master's degree in computer science

Job description

Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security.

Your Responsibilities:

• -Contributing to the monitoring and the triage of vulnerabilities across Vates products
• -Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions
• -Coordinating the correction with the product teams and monitor the remediation deadlines
• -Participating in the backport effort of fixes
• -Writing and publishing security advisories for Vates products
• -Tracking recurrent vulnerabilities and provide recommendations for security improvements
• -Contribute to the development of automation tools within the PSIRT
• -Review and improve the process with the security team

Required Skills:

• -Ability to read code (C, python, etc) and understand software or network architectures
• -Initial experience in security incident management and response
• -Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience
• -Interest in learning packaging for distributions if no previous background
• -Knowledge of distribution packaging systems
• -Knowledge of RPM-based distribution and their packaging system
• -Problem solving mindset
• -Detail-oriented

At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.

Location:

Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort.

You are free to work 100% remotely or come on-site occasionally, depending on your preferences.

• -Health insurance coverage funded at 50% by the company
• -Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)
• -Employee savings plan (PEE)
• -Annual bonus

As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender.

Qualifications

Are you passionate about cybersecurity, vulnerability analysis, and open-source software?

Do you enjoy solving complex technical problems and collaborating with development teams ? Then join us !

We are looking for someone with:

• -A master degree in computer science
• -At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• -Fluent in English and French.

Our Company

Vates is a French software company specializing in Open Source and virtualization with a deep commitment to open, collaborative development. Our main projects, Xen Orchestra and XCP‑ng, span the full virtualization stack: from the hypervisor (Xen) and virtualization platform (XCP‑ng) to management and VM backups (Xen Orchestra). Our team works across multiple countries, fully embracing remote work with transparent workflows and accessible communication channels. At Vates, we are driven by a strong, people‑first culture that values benevolence, inclusivity, and a horizontal structure. Every member is empowered to contribute ideas, make decisions, and grow with the company. Our open‑source model is core to everything we do, not just in our code, which is available on GitHub and GitLab, but in our collaborative approach with the community. We believe in "upstream first," dedicating our expertise and resources to support and advance foundational projects like Xen, and helping contributors of all levels join us on this journey.

Are you the one?

Vates was born more than 10 years ago in the French Alps, in Grenoble. Our team is composed of more than 150 people, spread out in France and elsewhere in the world. Want to know more about our history? Our team? Thinking of joining us?