Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.

We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security.

Your Responsibilities:

Follow product security incidents :

-Contributing to the monitoring and the triage of vulnerabilities across Vates products

-Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions

-Coordinating the correction with the product teams and monitor the remediation deadlines

-Participating in the backport effort of fixes

-Writing and publishing security advisories for Vates products

PSIRT continuous improvement :

-Tracking recurrent vulnerabilities and provide recommendations for security improvements

-Contribute to the development of automation tools within the PSIRT

-Review and improve the process with the security team

Required Skills:

-Ability to read code (C, python, etc) and understand software or network architectures

-Initial experience in security incident management and response

-Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience

-Interest in learning packaging for distributions if no previous background

-Knowledge of distribution packaging systems

-Knowledge of RPM-based distribution and their packaging system

-Good communication skills

-Problem solving mindset

-Detail-oriented

Why join us ?

At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.

Location:

Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort.

You are free to work 100% remotely or come on-site occasionally, depending on your preferences.

Benefits:

-Health insurance coverage funded at 50% by the company

-Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)

-Employee savings plan (PEE)

-Profit-sharing scheme

-Annual bonus

-100% remote work

As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender.

Are you passionate about cybersecurity, vulnerability analysis, and open-source software?

Do you enjoy solving complex technical problems and collaborating with development teams ? Then join us !

We are looking for someone with:

-A master degree in computer science

-At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.

-Fluent in English and French.