Functional Analyst Security

In the context of strengthening our cybersecurity position and NIS2 compliance, you will be involved in the full application lifecycle to integrate, validate, and maintain security controls.

As a Functional Analyst Security, you form the link between development, operations, and cybersecurity to guarantee secure and resilient applications. The following tasks are part of your responsibilities:

• You implement the Software Development Lifecycle (SDL) based on OWASP SAMM, integrate the principles of Secure by Design / Shift Left, and translate security requirements into concrete controls (OWASP ASVS).
• You are responsible for control validations by implementing and monitoring SAST, DAST, and SCA tools in the CI/CD pipelines.
• You manage security testing and define indicators (vulnerabilities, coverage).
• You take on the management of vulnerabilities and risks, including active monitoring, evaluation (CVSS/EPSS), coordination of remediations, threat modelling, and the follow-up of technical debt.
• You safeguard operational security by ensuring the maintenance of controls in production, the management of vulnerabilities and incidents, support for teams, as well as the management of patches and dependencies (SBOM).
• Finally, you contribute to NIS2, participate in audits, and contribute to awareness regarding best practices.

Profile

• You have a master's degree in IT or equivalent.
• You possess experience in application security and good knowledge of architectures as well as the development cycle (Agile/DevOps).
• You are able to establish the link between business issues, security requirements, and their technical implementation.
• You possess knowledge of NIST, OWASP, SDL, threat modeling, cryptography, and authentication.
• You master tools such as SonarQube, OWASP ZAP, CI/CD (Jenkins, Git), Jira, Dependency Track, and SBOM (CycloneDX, SPDX).
• You demonstrate skills in functional analysis and the drafting of technical specifications, collaboration with multidisciplinary teams, as well as excellent communication skills and the ability to explain technical issues understandably.
• Finally, you have a good knowledge of French, and you possess a good level of written English.