Red Team Analyst: Threat Emulation & Pen Testing

AXA Group; Paris; Sur place; EUR 65 000 - 95 000; Plein temps

Résumé du poste

AXA Group Operations in France is building a new Group Information Security Practice to ensure a coordinated response to cyber threats, enable risk decisions, and embed sustainable security capabilities across AXA entities.

You will join the Group Security division, perform red team operations, adversary emulation, and penetration testing, and collaborate with blue teams and SOCs to improve detection and response.

Qualifications

• Experience in assurance testing/red team/penetration testing activities > 3 years
• Experience with project management & coordination < 3 years
• Experience with Information Security controls and vulnerability databases > 3 years
• Experience in network/firewall engineering, administration, design & implementation including information security practices < 3 years

Responsabilités

• Plan, coordinate, and execute red team operations to simulate cyber threats
• Mimic attacker TTPs to identify weaknesses in defenses
• Conduct comprehensive penetration tests of networks, applications and physical security
• Identify vulnerabilities and provide actionable remediation guidance
• Develop and customize tools to support red team operations
• Document findings and provide priorities for remediation to stakeholders
• Collaborate with blue teams, incident responders and SOCs; mentor juniors
• Stay updated with cybersecurity threats and defensive strategies

Connaissances

Red team operations

Penetration testing

Adversary emulation

Vulnerability research

Tool development

Reporting

Collaboration

Fluent in English

Description du poste

AXA Group Operations in France is building a new Group Information Security Practice to ensure a coordinated response to cyber threats, enable risk decisions, and embed sustainable security capabilities across AXA entities.

You will join the Group Security division, perform red team operations, adversary emulation, and penetration testing, and collaborate with blue teams and SOCs to improve detection and response.