Vulnerability Expert – VOC AppSec F/H
Devoteam is a technology, cloud, cyber, AI, and sustainable development consulting company. With more than 11,000 employees in more than 25 countries, we have been guiding our clients through the technological transformation of their businesses for nearly 30 years. In France, we are 4,500 Digital Architects distributed across more than 50 expertise tribes and coached by more than 400 expert managers. Joining us means: working on innovative and sustainable projects to put Technology at the service of humanity, continuously certifying in new market technologies, and sharing unique moments with colleagues! To discover more about Devoteam, visit here .
Devoteam Cyber Trust is the team dedicated to Cybersecurity expertise. Composed of more than 800 passionate experts worldwide, including 450 in France, we advise our clients on complex topics: cyber, risks, resilience, network security, Cloud security, encryption, audit, and security around our 5 partners AWS, Google, Microsoft, Salesforce, and ServiceNow. To learn more about our career trajectories, discover the journey of Adel, cybersecurity consultant at Devoteam Cyber Trust! As part of a mission for a client in the energy sector, you will join the VOC AppSec as a Vulnerability Expert, providing RUN support for the management and monitoring of application vulnerabilities. Main Missions Qualify reported vulnerabilities (true/false positive) and challenge project Security Champions on their analysis Provide N3 AppSec expertise in support of project teams on complex technical analyses and the choice of fixes (OWASP categories: SQL injection, XSS, hardcoded secrets, etc.) Ensure expertise in the monitoring of the VOC AppSec RUN, covering scanners such as SAST, IaC, Secrets, and SCA Contribute to the continuous improvement of the process (feedback from Security Champions, adjustment of scan and exclusion rules) Coordinate different stakeholders and lead meetings between analysts, project managers, and management Supervise SAST scans (Checkmarx) orchestrated via a vulnerability orchestrator across all GitLab repositories of the application park
Innovation & AI applied to VOC
Design and develop new AI-based solutions to automate and improve the reliability of vulnerability qualification (automatic true/false positive sorting, intelligent prioritization of fixes) Explore the use of LLM to popularize technical analyses for development teams (generation of contextualized remediation recommendations) Identify generative AI or automation use cases to accelerate the processing of SAST/SCA/IaC/Secrets scans and reduce the workload of N3 analysts Prototype and industrialize internal tools (scripts, agents, integrations) aimed at enriching or completing the SOLANUM device Maintain active monitoring of AppSec/AI innovations in the market and propose their integration within the VOC device Drive a continuous improvement approach oriented towards innovation, in connection with technical teams and management"
Good project management skills Solid expertise in technical vulnerability management Solid global Cyber culture Good AppSec culture (OWASP, SAST/SCA) Understanding of AppSec scanners Proficiency in Checkmarx or an equivalent tool Ability to popularize technical concepts for development teams Taste for RUN and continuous service improvement Appetite for AI applied to cybersecurity and for product/process innovation
Why join us? Career follow-up conducted by a tech manager with regular exchanges;
Technical and soft skills certifications available with a goal of at least 2 certifications per year, vouchers provided, and expert coaching;
Leading technological partners: Google, AWS, Microsoft, ServiceNow, Snowflake, MuleSoft, Outsystems, SAP, Databricks, Gitlab, …;
A trajectory with varied possibilities via geographic, functional, and inter-entity / tribe or squad internal mobility.
Internal roles to build your career within the Group: manager, internal trainer, tech leader, digital champion, squad leader, …
Internal contributions to broaden your skills such as school relations, recruitment, sales, writing articles, hosting meet ups or communities, …
A strong sense of community through internal events and sporting and cultural activities thanks to more than 30 Happiness@Devoteam clubs, allowing you to meet your colleagues regularly and share your passions;
A Tech for People vision embodied in our values, our responsible practices, our sustainable development program awarded the Ecovadis label, and our strong commitments, notably with the Devoteam Foundation.
How does the recruitment process work at Devoteam? It consists of 2 to 3 interviews: Talent Acquisition Interview: the goal is to review your skills, your level of English, and validate your motivations
Tech & Business Interview: this interview aims to deepen your technical skills and verify their suitability for our needs during an exchange with a business expert
Leadership Interview: it allows for the evaluation of your potential, your ambitions, and to consider your evolution within Devoteam.
We prefer at least one in-person interview. A reference check is requested and, depending on your profile, tests (technical, English, personality...) may be sent to you. If your application is selected, we will send you a proposal presenting the hiring conditions. Upon acceptance, the employment contract is formalized. If you share our passion for technology and wish to build tomorrow's responsible digital world, then you might be the enthusiast we are looking for at Devoteam. The Devoteam Group works for equal opportunity, for the promotion of its female and male employees based on merit, and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism, and excellence of our organization. All our positions are open to people with disabilities.