Own threat‑led strategy for onboarding and prioritising security telemetry, ensuring data sources are aligned to MITRE ATT&CK coverage, threat modelling outputs and adversary behaviour relevant to Vodafone;
Responsibilities
Own the threat‑led strategy for onboarding and prioritising security telemetry
Define and govern acceptance criteria for telemetry consumed by CSOC
Maintain ATT&CK‑aligned coverage views
Provide actionable insight into telemetry quality and availability
Liderar el desarrollo de la estrategia, operación y evolución de la función de inteligencia de amenazas con la finalidad de identificar, analizar, correlacionar y comunicar las amenazas cibernéticas a las cuales el Banco está expuesto.
Responsibilities
Plan and execute the Information Security (IS) strategy and develop and manage security solutions for multiple areas
Utilize a global risk management model to analyze emerging security threats and define solutions to mitigate exposure
Advise and provide direction to the business and IT leaders on risk management decisions
Establish alignment of IS program with business strategy, and coordinate with leadership to achieve IS program goals and goals
Determine approach to execute functional strategy and oversee end results, budgeting, planning, policy and future strategy formulation
Requirements
Bachelor’s degree/University degree or equivalent experience
Support NATO’s Cyber Threat Analysis Branch by researching, analysing and tracking sophisticated cyber threat actors, their infrastructure, tools, tactics, techniques and procedures.
Responsibilities
Research and analyse prioritized cyber threat actors, their infrastructure, tools, capabilities, attack patterns and evolving TTPs using commercial, open-source and internal intelligence sources.
Identify, investigate and monitor malicious infrastructure, domains, IP addresses, tools and associated indicators to uncover emerging threats and adversary activity.
Develop and maintain Python scripts, automated queries and analytical workflows to track threat actor infrastructure, identify patterns and improve the scalability and efficiency of intelligence collection.
Conduct technical analysis of cyber threats, correlate intelligence from multiple sources, identify emerging attack techniques and develop an accurate understanding of the cyber threat landscape.
Translate threat intelligence findings into actionable detection signatures, contextualized indicators of compromise and standardized technical intelligence products to support network and host-based defence.
Requirements
Bachelor's degree in Computer Science, Engineering, Statistics, Operations Research or another relevant quantitative discipline with substantial computer science content
Nice to have: experience within military, government, defence or intelligence organisations
Responsable du renseignement de menace et de la réponse aux incidents de l'écosystème, conception et maintenance de scénarios de détection, gestion des indicateurs de compromission, élaboration de playbooks, surveillance en temps réel, analyse technique des attaques, rédaction de rapports de veille et participation aux rotations d'astreinte.
Compensation
Salaire : De 50 K€ à 70 K€ (selon expérience) brut annuel
Responsibilities
Concevoir des scénarios de détection avancés basés sur les TTPs des groupes APT et cybercriminels
Définir et maintenir le référentiel d'indicateurs de compromission (IoCs) issus de sources OSINT, dark web et partenaires (CERT, InterCERT)
Évaluer et intégrer de nouveaux flux de renseignement et solutions de cyberveille (Threat Intelligence Platforms)
Participer à l'élaboration des playbooks de réponse à incident et des cas d'usage SIEM/EDR
Contribuer aux campagnes de sensibilisation des collaborateurs aux bonnes pratiques de sécurité
Ingénieur Logiciel DevSecOps responsable de la conception, déploiement et maintenance des chaînes CI/CD, de l’infrastructure as code, et de la sécurisation des environnements logiciels sol.
Compensation
Un package de rémunération attractif
Responsibilities
Concevoir, déployer et maintenir les chaînes CI/CD adaptées aux besoins des plateformes
Mettre en place et maintenir des solutions d’infrastructure as code
Automatiser les processus de maintenance en condition opérationnelle et de sécurité des environnements digitaux
Participer au choix de solutions de cybersécurité, à leur architecture et leur déploiement
Participer à l’administration et à l’évolution des environnements Linux, virtualisés ou conteneurisés
Senior Software EngineerNewFiligran · Remote, France
Ingénieur Logiciel DevSecOps - F/HThales · Toulouse, France