Lead Vulnerability Expert (F/M)

Job: Digital and IT Cybersecurity

Contract type: Permanent

Location: 92400 Courbevoie France

Offer ID: 78982

• POSITION & RES P ONSABILITIES

**Position:**Lead Vulnerability Expert (Player-Coach)

Responsibilities:

• Act as the technical lead for vulnerability detection, validation, and remediation.

• Perform advanced analysis: exploit reproduction, impact assessment, and attack-path mapping.

• Optimize vulnerability scanning tools for accuracy and coverage.

• Master Active Defense tools to enhance efficiency and develop automation capabilities.

• Mentor and coach team members: review outputs, share best practices, and elevate technical skills.

• Collaborate with infrastructure, Identity and local teams to optimize remediation efforts.

• Stay ahead of zero-days, KEV advisories, and exploit trends; lead technical response during critical events.

• Ensure communication with business units, track incidents, and follow up.

• Support Offensive Security initiativeswith vulnerability context and exploit validation.

MISSION

Technical Excellence

• Act as the technical authorityfor vulnerability management within the Active Defense team.

• Ensure continuous exposure reductionby applying the **CTEM (Continuous Threat Exposure Management)**framework to prioritize and address vulnerabilities based on real-world risk.

• Drive advanced vulnerability analysis , including exploit reproduction in collaboration with the offensive security team , attack-path mapping, and impact assessment, to provide actionable insights for remediation.

• Develop automation and tooling enhancementsto improve efficiency and accuracy in vulnerability detection and validation.

Leadership & Enablement

• Serve as a mentor and coachfor a team of analysts and engineers, fostering technical growth and best practices.

• Act as a bridge between technical teams and business units , ensuring clear communication of risks and remediation priorities.

• Lead cross-functional collaborationto remove blockers and accelerate remediation efforts.

• Support Offensive Security initiativesby validating exploitability and providing vulnerability context for attack simulations.

Strategic Contribution

• Drive and animate community programs ( e.g., Weekly Operational Cybersecurity Calls, seminars, and other initiatives).

• Maintain situational awarenessof emerging threats, zero-days, and KEV advisories, ensuring rapid technical response during critical events.

• Contribute to the Active Defense****visionby aligning vulnerability management activities with corporate security objectives .

• RELATIONSHIPS

• **Reports to:**Head of Active Defense

• Works closely with:

• Active Defense team members (Vulnerability Management, Offensive Security , SecOps Engineering )

• CSIRT

• Infrastructure, Cloud, and Application teams

Vulnerability Champions who are part of the local cyber teams

• EXPERIENCE

The Lead Vulnerability Expert excels at simplifying and optimizing vulnerability management workflows, demonstrates strong understanding of IT architecture, and can propose effective vulnerability workarounds.

A thorough knowledge of Tenable and WIZ tools is highly appreciated.

The Lead Vulnerability Expert is familiar with intrusion methods on computer systems and networks and can determine the potential impact of a vulnerabilit y according to multiple factors:

• CVSS score

• EPSS score

• Popularity of the impacted hardware or software

• Ease of exploitability

• Existing Po C

Etc …

• REQUIRED SKILLS

• Have a thorough knowledge of the methods and functions of security equipment.

• 5 years’ experience with v ulnerability management or related security functions.

• Participate in the improvement and development of process and procedure documentation.

• Ability to work independently to perform analysis and investigations.

• Possess an information security and operations mindset.

• Keep a personal watch and share it with the security teams.

• Ability to multi-task and prioritize.

• Full proficiency in verbal and written English.

• Adaptability and resilience in a fast-paced, evolving threat landscape.