PSIRT Analyst — Remote, Open-Source Security

Vates SAS; Grenoble; Remote; EUR 60,000 - 75,000; Full time

Benefits offered by this job

Health insurance

Works Council benefits

Employee savings plan (PEE)

Annual bonus

Job summary

Vates is seeking a PSIRT Analyst to secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to continuous product security improvements.

You will monitor vulnerabilities, provide severity assessments, backport fixes, write advisories, and help automate PSIRT workflows within a cutting-edge open-source virtualization company. Remote-friendly with flexible schedules.

Qualifications

• Master's degree in computer science.
• At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• Fluent in English and French.

Responsibilities

• Contribute to monitoring and triage of vulnerabilities across Vates products.
• Analyze vulnerabilities and provide accurate severity assessments to help the product team.
• Coordinate the correction with product teams and monitor remediation deadlines.
• Participate in backporting fixes.
• Write and publish security advisories for Vates products.
• Track recurrent vulnerabilities and provide security improvement recommendations.
• Contribute to developing automation tools within the PSIRT.
• Review and improve processes with the security team.

Skills

Code reading

Incident management

Vulnerability knowledge

Packaging systems

RPM packaging

Problem solving

Detail oriented

Education

Master's degree in computer science

Job description

Vates is seeking a PSIRT Analyst to secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to continuous product security improvements.

You will monitor vulnerabilities, provide severity assessments, backport fixes, write advisories, and help automate PSIRT workflows within a cutting-edge open-source virtualization company. Remote-friendly with flexible schedules.