Bug Bounty Hunter

Job Description

Weare looking for a permanent Bug Bounty Hunter (M/F), based in Montpellier, Valbonne, or working fully remotely.

What we can achieve together:

Septeo'sRed Team has transformed the way it operates. Vulnerability research no longer relies on occasional, manually executed campaigns, but on agentic offensive workflows: chains of agents that continuously explore the exposed attack surface, test applications, analyse code and verify fixes.

Thisshift changes where the value lies: what matters today is no longer the number of testing hours, but the quality of the tools and capabilities designed, together with the judgement used to steer them.

Reportingto the Head of Offensive Security R&D, your role will cover two core areas: building, stabilising and maintaining vulnerability detection tools and processes; and working closely with the Group’s Product Owners, DTOs, developers and CISOs to share findings, support remediation and strengthen security practices.

Yourwork will be built around three systems that currently structure our offensive security capabilities:

• An AI-powered internal EASM platform: continuous discovery of the exposed attack surface, asset qualification and ownership mapping, and identification of attack chains.
• Agentic SAST: continuous code analysis and repository-specific remediation proposals, rather than generic recommendations.
• A vulnerability lifecycle management platform: from initial finding to automated retesting and management-level reporting.

Youwill operate, strengthen and continuously improve these systems. From day one, you will also identify and design what is missing: you will not simply execute a roadmap, but help shape it.

Yourday-to-day responsibilities:

• Design, develop and enhance offensive tools and workflows, including their architecture, scope, guardrails and stop conditions.
• Deploy, stabilise and maintain them with a Dev/DevOps mindset, covering pipelines, CI/CD, monitoring and continuous reliability improvements.
• Operate them on a daily basis: schedule, launch and monitor workflows; diagnose agent drift; triage false positives; and restore systems after incidents.
• Prototype quickly, measure tangible value and decide what should be industrialised or discontinued.
• Work regularly with the Group’s Product Owners, DTOs, developers and CISOs to qualify vulnerabilities, turn findings into actionable information and track remediation.
• Document design decisions, including guardrails that were considered but not retained and the reasons behind those choices.
• Propose and design the next capabilities that will help strengthen the Group’s security posture.

Company Description

Septeois a leading software company in Europe, with an international presence, and is ranked among the top five vertical software publishers in France. Experiencing strong growth and continuous transformation, the Group has established itself as a key player in the software industry through the strength of its people: determined, bold and committed teams.

At Septeo, artificial intelligence is at the heart of our evolution. We see AI as a driver of sustainable performance, collaboration and innovation, responsibly embedded in everyday practices and made accessible across all our professions. Our ambition is clear: “make intelligent software for Europe”.

Our culture is built on strong values: being, acting and transforming together. It is not set in stone; it comes to life every day through our actions and decisions, striking a balance between performance, responsibility and enjoyment.

This ambition is reflected in what we do every day: designing software that supports life’s essential moments for millions of citizens. Being behind these key moments comes with great responsibility. It is ours. And perhaps, soon, yours.

JoiningSepteo means becoming part of an international collective journey, helping drive the Group’s transformation in a fast-moving environment, and turning AI into a tangible source of value creation, today and tomorrow.

Qualifications

Could this be you?

• First and foremost, you have a background as a Hunter, Bug Bounty Hunter or security researcher. You know how to explore an attack surface, identify non-obvious exploitation paths and distinguish a genuinely exploitable vulnerability from scanner noise. A strong bug bounty track record or freelance security experience will be highly valued.
• You have hands‑on experience applying AI to security, including agents, automation, tool development and advanced use of AI models. Rather than limiting yourself to manual testing, you can define what needs to be built, guide a coding agent, review its output and assess whether it is robust. He