Vulnerability Analyst

Joining Capgemini Engineering as a Cybersecurity Analyst, you will become part of a cybersecurity team focused on Vulnerability Management, Security Monitoring, and continuous improvement of our clients' security posture.

In this role you will play a key role in:

• Performing analysis and follow-up of security vulnerabilities across systems, infrastructures, and applications.
• Monitoring, analyzing, and handling security events and findings.
• Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.
• Communicating risks and security findings to technical and business stakeholders.
• Performing security and compliance assessments aligned with industry standards and best practices.
• Working closely with infrastructure, cloud, and application teams to ensure timely remediation of identified vulnerabilities.
• Supporting security governance activities and contributing to continuous improvement of vulnerability management processes.
• Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.

We are looking for a cybersecurity professional with strong analytical skills and hands-on experience in vulnerability management and security operations.

• Experience in Vulnerability Management and/or Vulnerability Assessment activities.
• Experience working as a Cybersecurity Analyst, Vulnerability Analyst, Security Analyst, or SOC Analyst, with proven involvement in vulnerability analysis, remediation tracking, and security monitoring.
• Experience with security platforms such as Qualys, BitSight, and/or CrowdStrike.
• Solid knowledge of Windows, Linux, and IP networking environments.
• Experience working with Cloud environments (AWS, Azure, and/or GCP).
• Knowledge of Containers and containerized environments.
• Understanding of information security and compliance frameworks, including CIS, NIST, ISO 27000, and OWASP.
• Ability to collaborate effectively with technical teams and stakeholders to drive remediation activities.
• Strong analytical, organizational, and communication skills.

Mandatory Skills

• Knowledge of network security technologies and services across Microsoft, Linux, and Container environments.
• Cloud security knowledge in AWS, Azure, and GCP.
• Experience with firewall technologies, namely Check Point, Fortinet, and Cisco.
• Knowledge of security frameworks and auditing standards, including CIS, NIST, ISO 27K, and OWASP.

Nice to Have

• Experience in Security Operations Centre (SOC) environments.
• Hands-on experience with security monitoring and incident analysis.
• Scripting and automation skills using PowerShell and/or Shell Script.
• Relevant cybersecurity certifications (Security+, CySA+, SC-200, Qualys certifications or similar).

• Join a multicultural and collaborative environment.
• Work on challenging cybersecurity projects across multiple industries
• .Access continuous learning opportunities, certification programs, and career development plans.
• Hybrid and flexible work model.Health and life insurance.Referral program with attractive bonuses.
• International environment with opportunities for growth and mobility.
• Modern offices and excellent team culture.