Cyber Security Analyst

We are seeking a skilled Cyber Security Analyst with a strong focus on Pentest management and Vulnerability Management. Responsible for managing the organization's Penetration Testing and Vulnerability Management programs, ensuring security assessments are completed as per policy, vulnerabilities are identified and remediated within defined timelines, and security risks are effectively tracked and reported.

• Manage the end-to-end penetration testing lifecycle for applications, infrastructure, cloud environments, and APIs.
• Develop and maintain the annual penetration testing plan based on risk and regulatory requirements.
• Coordinate with application owners, infrastructure teams, and third-party testing vendors.
• Review and validate penetration testing reports and findings.
• Track remediation activities and ensure closure within agreed SLAs.
• Monitor compliance with penetration testing frequency requirements (e.g., internet-facing, critical, and regulated applications).
• Maintain evidence and documentation for audit and compliance reviews.
• Report penetration testing compliance metrics and KRIs to management.
• Support risk acceptance and exception management processes for unresolved findings.

• Manage vulnerability scanning activities across servers, endpoints, network devices, cloud platforms, and applications.
• Ensure regular execution of authenticated and unauthenticated vulnerability scans.
• Analyze vulnerability results and prioritize remediation based on risk, CVSS score, exploitability, and business impact.
• Coordinate with support teams for timely remediation of vulnerabilities.
• Validate remediation efforts through re-scanning and closure verification.
• Track compliance against vulnerability remediation SLAs.
• Identify recurring vulnerabilities and recommend long-term corrective actions.
• Manage vulnerability exceptions and compensating controls where applicable.

• Define and monitor security KPIs and KRIs related to Penetration Testing and Vulnerability Management.
• Prepare executive dashboards and management reports.
• Support internal and external audits, regulatory reviews, and security assessments.
• Ensure alignment with organizational security policies, standards, and regulatory requirements.
• Provide risk-based recommendations to stakeholders and senior management.

• Collaborate with application teams, infrastructure teams, cloud teams, project managers, and third-party vendors.
• Act as the primary point of contact for penetration testing and vulnerability management activities.
• Conduct remediation review meetings and drive issue resolution.

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.