Vulnerability Analyst

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world's most innovative companies unleash their potential. From autonomous cars to lifesaving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries.

Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

Joining Capgemini Engineering as a Cybersecurity Analyst, you will become part of a cybersecurity team focused on Vulnerability Management, Security Monitoring, and continuous improvement of our clients' security posture.

In this role you will play a key role in

• Performing analysis and follow-up of security vulnerabilities across systems, infrastructures, and applications.
• Monitoring, analyzing, and handling security events and findings.
• Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.
• Communicating risks and security findings to technical and business stakeholders.
• Performing security and compliance assessments aligned with industry standards and best practices.
• Working closely with infrastructure, cloud, and application teams to ensure timely remediation of identified vulnerabilities.
• Supporting security governance activities and contributing to continuous improvement of vulnerability management processes.
• Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.

We are looking for a cybersecurity professional with strong analytical skills and hands-on experience in vulnerability management and security operations.

• Experience in Vulnerability Management and/or Vulnerability Assessment activities.
• Experience working as a Cybersecurity Analyst, Vulnerability Analyst, Security Analyst, or SOC Analyst, with proven involvement in vulnerability analysis, remediation tracking, and security monitoring.
• Experience with security platforms such as Qualys, BitSight, and/or CrowdStrike.
• Solid knowledge of Windows, Linux, and IP networking environments.
• Experience working with Cloud environments (AWS, Azure, and/or GCP).
• Knowledge of Containers and containerized environments.
• Understanding of information security and compliance frameworks, including CIS, NIST, ISO 27000, and OWASP.
• Ability to collaborate effectively with technical teams and stakeholders to drive remediation activities.
• Strong analytical, organizational, and communication skills.

Mandatory Skills

• Knowledge of network security technologies and services across Microsoft, Linux, and Container environments.
• Cloud security knowledge in AWS, Azure, and GCP.
• Experience with firewall technologies, namely Check Point, Fortinet, and Cisco.
• Knowledge of security frameworks and auditing standards, including CIS, NIST, ISO 27K, and OWASP.

Nice to Have

• Experience in Security Operations Centre (SOC) environments.
• Hands-on experience with security monitoring and incident analysis.
• Scripting and automation skills using PowerShell and/or Shell Script.
• Relevant cybersecurity certifications (Security+, CySA+, SC-200, Qualys certifications or similar).