Ingénieur cybersécurité (menaces, exposition et risques)
Core
Structured collection, qualification, and analysis of cyber threat information to identify relevant threats, assess associated risks, and trigger appropriate mitigation measures for a large public organization.
Role type
Cyber Threat Intelligence and Risk Analyst
Builds
Threat intelligence reports, risk assessments, and mitigation action plans
Domain
Cybersecurity, Threat Intelligence, Risk Management
Required skills
Cyber threat intelligence, vulnerability management, exposure management, cyber risk analysis, asset management, SI mapping, MITRE ATT&CK, TTP, IoC, CVSS, EPSS, KEV, SOC operations, EDR tools, vulnerability scanners
Preferred skills
PowerShell scripting, SPL or equivalent query language
Technologies
MITRE ATT&CK, TTP, IoC, CVSS, EPSS, KEV, EDR, vulnerability scanners, CMDB
Responsibilities
Organize threat intelligence monitoring and characterize relevant threats; Evaluate threat relevance based on assets, technologies, exposure, and existing protections; Assess risk by cross-referencing CVSS, EPSS, KEV, exposure, and criticality; Alert on justified risk levels and propose detection or compromise investigation actions; Coordinate with security teams to implement mitigation measures (patching, hardening, blocking); Track exposure reduction until risk closure; Produce indicators and summaries for decision-makers
Seniority
Mid-Senior, hands-on IC