Vulnerability Management Analyst - Cybersecurity - Aix en Provence

Role Summary

As a Cybersecurity Analyst, you will join a team of technical experts in the field of vulnerability management.

You develop your technical expertise by taking part in the various research and development projects of the “Vunlerability Operation Center” (VOC)

Your role and missions

• You design and develop reporting and correlation tools
• You model the attack surface with regard to our Threat Intelligence division, our investigations from various sources (OSINT, etc.)
• You analyze and monitor vulnerabilities
• You evaluate the level of exploitability
• You prioritize based on criticality
• Participate in internal development projects
• You follow training on the main vulnerability tools on the market

In short

• You manage and schedule vulnerability scan requests
• You are the main contact for our clients on remediation both in France and abroad
• You write vulnerability reports and risk-oriented summaries

You support our clients with the remediation plan.

You carry out vulnerability tests (Analysis & Reproduction of the most critical vulnerabilities in a dedicated environment such as "Lab/Sandbox", Kali, etc.)

Requirements

Graduate with a BAC+5 from an engineering school or equivalent, you have at least 6 years of experience in an equivalent position in the field of cybersecurity or a strong appetite for understanding and explaining vulnerability management from both a network and system point of view to business teams.

• You have experience in leading vulnerability scanning campaigns.
• You are familiar with one or more of the following cyber technological environments: Rapid7, Qualys, Tenable, Cyberwatch, etc.
• Conscientious and curious, you are able to communicate, read and write technical texts in French and English.

Benefits

What we offer you

• A teleworking agreement to telework up to 2 days per week depending on your missions.
• An interesting benefits package: mutual insurance, a CSE, restaurant vouchers, a profit-sharing agreement, vacation bonuses and co-optation.
• Multiple career opportunities: more than 30 job families, so many pathways to imagine together.
• Hundreds of training courses to develop your skills and evolve within the Group.
• Independent training platforms to prepare for your certifications and support your personal development.
• The possibility of getting involved with our foundation or our partner “Friday”.
• The opportunity to join the Tech'Me UP collective (training, conferences, monitoring, and much more...).
• Permanent contract - Ile de France - Vulnerability management analyst
• An inclusive and committed employer, our company works every day to fight against all forms of discrimination and promote a respectful working environment. This is why, committed to diversity and diversity, we encourage all applications and all profiles.
• https: //www.soprasteria.fr/nous-connaitre/nos-engagements

About the Company

About Sopra Steria

Sopra Steria, a major player in Tech in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, services and digital solutions activities. It helps its clients carry out their digital transformation and obtain concrete and lasting benefits. The Group provides a global response to the competitiveness challenges of large companies and organizations, by combining in-depth knowledge of sectors of activity and technologies with a collaborative approach. Sopra Steria places people at the heart of its action and is committed to its clients to make the most of digital technology to build a positive future. In 2025, the Group achieved a turnover of 5.6 billion euros.

• The world is how we shape it*
• Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN code: FR0000050809
• For more information, find us at www.soprasteria.com/fr
• *The world is as we make it

Sopra Steria's Cybersecurity Business Line is present in Europe with more than 2,500 experts - more than half of whom are in France - our mission is to provide trusted solutions and services to the most exposed public and private actors to ensure the resilience of their critical systems and protect their sensitive digital assets.

Beyond the strong European presence, the cybersecurity division is positioning itself and developing in North America (Toronto), as well as in Asia Pacific (Singapore).

We offer 3 areas of offering: Prevention, Protection & detection and response. These 3 areas work together to provide our customers with consistent information and decision-making capabilities informed by operational reality. This approach is based on our transversal methodology centered on Miter Att&ck.

Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience to cyberattacks and accelerate your digital transformation.

An end-to-end trusted solution

A “security by design” approach focused on business risks and transversal to the organization.

A commitment to the development of innovative sovereign solutions.

Each individual can have an impact on responding to these new cyber risk challenges. Everyone contributes both individually and collectively to securing our clients and society while maintaining personal and professional growth.