Lead Vulnerability Expert (Cybersecurity)

Location: 92400 Courbevoie, France; onsite workplace

Company

hirify.global is the employing organization for this cybersecurity position.

What you will do

• Lead vulnerability detection, validation, remediation, and continuous exposure reduction within the Active Defense team using the CTEM framework.
• Perform advanced analysis, including exploit reproduction, impact assessment, attack-path mapping, and risk prioritization using CVSS, EPSS, exploitability, affected-asset popularity, and proof-of-concept evidence.
• Optimize vulnerability scanning tools and develop automation and tooling enhancements for greater accuracy, coverage, and efficiency.
• Mentor analysts and engineers, review outputs, share best practices, and raise technical capability.
• Coordinate with infrastructure, cloud, application, identity, local cyber, CSIRT, and business teams to accelerate remediation and communicate risks.
• Monitor zero-days, KEV advisories, and exploit trends; support Offensive Security initiatives and lead technical responses during critical events.

Requirements

• At least 5 years of experience in vulnerability management or related security functions.
• Thorough knowledge of security equipment methods and functions, IT architecture, intrusion methods, and vulnerability-management workflows.
• Ability to perform analysis and investigations independently and propose effective vulnerability workarounds.
• Information security and operations mindset, with the ability to maintain a personal threat watch and share findings with security teams.
• Ability to multitask and prioritize in a fast-paced, evolving threat landscape.
• Ability to improve and develop process and procedure documentation.
• Full proficiency in verbal and written English.
• Adaptability and resilience.

Nice to have

• Thorough knowledge of Tenable and Wiz tools.

Culture & Benefits

• Player-coach role combining technical authority, mentoring, and cross-functional collaboration.
• Participation in community programs such as Weekly Operational Cybersecurity Calls and seminars.
• Permanent employment contract (CDI).
• Onsite work in Courbevoie, France.