PSIRT Analyst

Job Description
Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way. We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security. Your Responsibilities Follow product security incidents :
• Contributing to the monitoring and the triage of vulnerabilities across Vates products
• Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions
• Coordinating the correction with the product teams and monitor the remediation deadlines
• Participating in the backport effort of fixes
• Writing and publishing security advisories for Vates products PSIRT Continuous Improvement
• Tracking recurrent vulnerabilities and provide recommendations for security improvements
• Contribute to the development of automation tools within the PSIRT
• Review and improve the process with the security team Required Skills
• Ability to read code (C, python, etc) and understand software or network architectures
• Initial experience in security incident management and response
• Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience
• Interest in learning packaging for distributions if no previous background
• Knowledge of distribution packaging systems
• Knowledge of RPM-based distribution and their packaging system
• Good communication skills
• Problem solving mindset
• Detail-oriented Why join us ? At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.

Location:
Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort. You are free to work 100% remotely or come on-site occasionally, depending on your preferences. Benefits
• Health insurance coverage funded at 50% by the company
• Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)
• Employee savings plan (PEE)
• Profit-sharing scheme
• Annual bonus
• 100% remote work As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender. Requirements Are you passionate about cybersecurity, vulnerability analysis, and open-source software? Do you enjoy solving complex technical problems and collaborating with development teams ? Then join us We Are Looking For Someone With
• A master degree in computer science
• At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
• Fluent in English and French.