Application Security Engineer

il y a 3 jours


Marseille, France CMACGM Temps plein

Led by Rodolphe Saadé, the CMA CGM Group, a global leader in shipping and logistics, serves more than 420 ports around the world on five continents. With its subsidiary CEVA Logistics, a world leader in logistics, and its air freight division CMA CGM AIR CARGO, the CMA CGM Group is continually innovating to offer its customers a complete and increasingly efficient range of new shipping, land, air and logistics solutions.
Committed to the energy transition in shipping, and a pioneer in the use of alternative fuels, the CMA CGM Group has set a target to become Net Zero Carbon by 2050.
Through the CMA CGM Foundation, the Group acts in humanitarian crises that require an emergency response by mobilizing the Group’s shipping and logistics expertise to bring humanitarian supplies around the world.
Present in 160 countries through its network of more than 400 offices and 750 warehouses, the Group employs more than 155,000 people worldwide, including 4,000 in Marseilles where its head office is located.
ROLE
The Penetration Tester role will be in charge of delivering penetration to improve the software and infrastructure security of the CMA CGM Group.
Reporting to the Group Head of Application Security, this role will be a deep technical security expert, able to validate the proper security implementation of CMA CGM Group assets.
A proven experience in red team assessments and infrastructure penetration tests is required.
RESPONSIBILITIES
- Deliver infrastructure penetration tests: Active Directory, Wi-Fi, networks, etc.
- Ability to identify full compromission path and kill-chain.
- Compromise modern infrastructures (containerized, microservices) and cloud platforms (AWS, GCP, Azure)
- Advanced knowledge of attack vectors and exploit techniques, including zero-day vulnerabilities
- Provide technical expertise and understanding to other services (ex. SOC, Forensic)
- Provide recommendations / mitigations to remediate or mitigate vulnerabilities
- Coordinate with various IT and business teams to prepare and organize penetration tests

QUALIFICATIONS & PROFILE
**Education**:

- Bachelor or Master degree in Computer Science, Information Technology or relevant degree
- OSCP, OSWE, OSCE or any other relevant certification

**Knowledge & Experience**:

- 8 years of experience in penetration testing
- Proven experience with infrastructure penetration tests and red team assessments
- Excellent knowledge of OWASP Top10, CWE
- Excellent understanding of micro-services architectures & APIs
- Proven penetration tester experience
- Use of various tools such as Burp Suite, Zap, Kali distribution
- Network skills (routing, encapsulation, VPN, firewalling, DNS )

**Other**:

- The ability to interact with CMA CGM colleagues, build good relationships at all levels and across all business units and organisations, and the ability of influence stakeholders of all levels
- Ability to work with others effectively, with 3rd parties, internal teams, and international business units, promoting knowledge sharing within and across teams
- Highly self-motivated and directed, with keen attention to detail
- Ability to properly manage time and priorities
- Rigor and quality
- Customer-oriented approach
- Fluent English mandatory, French optional

Please ensure you are familiar with the CMA CGM Corporate Internal Mobility guidelines


  • Security Software Engineer

    il y a 2 semaines


    Marseille, France Canonical Temps plein

    About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the...


  • Aix-Marseille-Provence Metropolis, France RED TIC Temps plein

    FreelanceAix-Marseille-ProvencePublié il y a 1 anRED TIC recherche un(e) Tech Lead Application Security pour piloter la sécurisation des applications critiques de nos clients. En tant que référent technique, vous serez chargé(e) de définir et de mettre en œuvre des stratégies de sécurité robustes pour assurer la protection des systèmes...


  • Marseille, France Canonical Temps plein

    A leading tech firm is seeking a skilled individual for a security role focused on defining and implementing security features. The candidate will lead initiatives, analyze vulnerabilities, and contribute to open source projects. Applicants should possess a strong background in computer science or a related field, excel in various programming languages, and...

  • Engineering Manager

    il y a 2 semaines


    Marseille, France Canonical Temps plein

    Join or sign in to find your next jobJoin to apply for the Engineering Manager - Ubuntu Security role at Canonical3 days ago Be among the first 25 applicantsJoin to apply for the Engineering Manager - Ubuntu Security role at CanonicalGet AI-powered advice on this job and more exclusive features.As the most widely used Linux distribution, Ubuntu underpins the...

  • Site Reliability Engineer

    il y a 2 semaines


    Marseille, France Canonical Temps plein

    Site Reliability Engineer Canonical is a leading provider of open source software and operating systems. Our platform, Ubuntu, is widely used in public cloud, data science, AI, engineering innovation, and IoT. We run hundreds of private cloud and Kubernetes clusters, and provide enterprise infrastructure DevOps practices to global enterprise and technology...

  • Software Engineer

    il y a 2 semaines


    Marseille, France Canonical Temps plein

    Join or sign in to find your next jobJoin to apply for the Software Engineer - Industrial IoT role at Canonical6 days ago Be among the first 25 applicantsJoin to apply for the Software Engineer - Industrial IoT role at CanonicalThis is an exciting opportunity for a software engineer passionate about open source software, Linux, edge computing, and IoT. Come...

  • Architecte Application

    il y a 2 semaines


    Marseille, France Ardemis Partners Temps plein

    **Localisation**: Marseille **Métier**: Architecte **Type de contrat**: mission **Salaire**: Selon Profil **Type d'entreprise**: Grand compte **Compétences**: Data Description de poste **Responsibilities**: Responsible for participating in the Data Terminal transformation. Conduct architecture activities to promote standards and advise the IT...

  • Security Analyst

    il y a 1 semaine


    Marseille, France Nextgen RH Temps plein

    **À propos de nous**: **Mission**: Notre client est une **entreprise** en tête de proue de l'innovation dans le domaine de la **cybersécurité, spécialisée dans la protection des systèmes embarqués**. Leur expertise repose sur l’**analyse des menaces, tant matérielles que logicielles**, au moyen de plateformes collaboratives. Ils sont aujourd'hui...

  • Ubuntu Core Software Engineer

    il y a 2 semaines


    Marseille, France Canonical Temps plein

    Join or sign in to find your next jobJoin to apply for the Ubuntu Core Software Engineer role at Canonical1 month ago Be among the first 25 applicantsJoin to apply for the Ubuntu Core Software Engineer role at CanonicalCanonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform,...

  • Cybersecurity Engineer

    il y a 5 jours


    Marseille, France Skeepers Temps plein

    At Skeepers, our vision is to connect the world’s brands and consumers through **authentic consumer voices**. These voices, when amplified strategically, help brands build trust, drive engagement, and deliver measurable impact Our **AI-powered UGC** **suite** seamlessly collects, manages, and activates UGC ensuring that every review, post, and interaction...