Product Security Incident Response Team (PSIRT) Vulnerability Analyst

CAPGEMINI ENGINEERING

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

• •Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• •Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• •Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• •Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• •Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• •Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• •Support customer, partner, and coordinated vulnerability disclosure activities.
• •Contribute to the continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.

YOUR PROFILE

• •Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or equivalent professional experience.
• •Experience in vulnerability management, product security, incident response, security operations, application security, or a related cybersecurity field.
• •Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.
• •Experience analyzing software, firmware, operating systems, network infrastructure, embedded systems, and/or OT/ICS environments.
• •Knowledge of common vulnerability classes, attack techniques, exploitation concepts, and remediation approaches, with familiarity with CVSS, CWE, CAPEC, and MITRE ATT&CK.
• •Experience with security testing and vulnerability management tools, such as SCA, SAST, vulnerability management platforms, and network/infrastructure scanners.
• •Knowledge of SSDLC, IEC 62443, NIST Cybersecurity Framework, and ISO 27001 is preferred.
• •Relevant cybersecurity certifications such as CISSP, GSEC, GCIH, GPEN, OSCP, Security+, or GIAC are preferred.

WHAT YOU’LL LOVE ABOUT WORKING HERE

• •Join a multicultural and inclusive team environment.
• •Enjoy a supportive atmosphere promoting work-life balance.
• •Engage in exciting national and international projects.
• •Hybrid work.
• •Your career growth is central to our mission. Our array of career growth programs and diverse professionals are crafted to support you in exploring a world of opportunities.
• •Training and certifications programs.
• •Health and life insurance.
• •Referral program with bonuses for talent recommendations.
• •Great office locations.

ABOUT CAPGEMINI

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology, and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.