Vulnerability Operations Center (VOC) Analyst Aix en Pce

Project overview

Company publishing software for the governmental domain

As part of the strengthening of the Vulnerability Operations Center (VOC) within the Operational Security Department, we are looking for a VOC Analyst with initial experience in vulnerability management.

The analyst contributes to the daily operation of the VOC by primarily ensuring monitoring of vulnerabilities, their analysis and qualification, the application of prioritization rules, and monitoring their treatment.

They will use the Group's tools and various monitoring sources to identify vulnerabilities likely to affect the information system, assess their criticality and exploitability, and direct their treatment to the relevant teams.

They also contribute to maintaining a reliable and up-to-date view of the information system's vulnerability posture, through data quality, action tracking, and operational reporting.

The VOC qualifies, prioritizes risk, directs, and verifies the treatment of vulnerabilities. The implementation of remediation remains the responsibility of the teams owning the affected systems.

Deliverables

Documented monitoring and analysis of vulnerabilities relevant to the Group;

qualification and prioritization of vulnerabilities according to VOC rules;

treatment or mitigation recommendations;

updating and maintaining the vulnerability tracking repository;

monitoring of remediation, follow-ups, and deadline overruns;

verification of the effective correction of vulnerabilities;

production of VOC operational indicators and reports;

maintaining data quality and completeness;

documentation of procedures and operating methods;

formalization of identified improvement or automation needs.

Profile sought

VOC Expert

understanding of the CVE → detection → qualification → prioritization → remediation → verification cycle.

Mastery of scoring and prioritization principles: CVSS, EPSS.

Good understanding of Windows, Linux, networks, and Active Directory environments.

Experience with a Vulnerability Management solution: Tenable, Qualys, Rapid7, or equivalent.

Ability to monitor vulnerabilities, analyze, and cross-reference different technical sources.

Ability to qualify the criticality, exploitability, and exposure of a vulnerability.

Analytical, investigative, and technical synthesis skills.

Ability to document a vulnerability and formulate treatment or mitigation recommendations.

Ability to ensure the follow-up and traceability of remediation with technical teams.

Work environment

2 days of training for skill development

2 days of remote work

Please respect the mission budget for VENELLES (no full remote work)

Project details

• Start: ASAP
• Duration: 6 mois renouvelable
• Remote: hybrid
• Location: Venelles, Provence-Alpes-Côte d'Azur, FR
• Languages: French