Operational Security Engineer

Responsibilities

Manage the end-to-end vulnerability and security compliance lifecycle, from scan preparation and execution to analysis, remediation tracking, and reporting.
• Perform and analyze vulnerability and compliance scans using Qualys, Tanium, PingCastle, and related security tools.
• Identify vulnerabilities, security weaknesses, configuration issues, and technical non-compliance across Windows, Linux, On-Premises, DMZ, and Cloud environments.
• Coordinate remediation activities with infrastructure, security, application, and business teams, ensuring vulnerabilities are addressed within defined SLAs. • Validate security configurations, patch management, and infrastructure compliance against internal and industry security standards.
• Define vulnerability ownership, provide remediation recommendations, maintain action plans, and escalate remediation risks or delays.
• Produce and maintain security KPIs, dashboards, and operational indicators using tools such as ELK Stack, Power BI, and Power Query.
 • Maintain and improve vulnerability scanning coverage across infrastructure and cloud environments.
• Ensure operational availability and lifecycle management of vulnerability management platforms, including upgrades, patching, incident resolution, and maintenance.
 • Perform technical assessments and Proofs of Concept (PoCs) for new security capabilities and tooling improvements.
 • Monitor evolving security requirements and identify compliance gaps, proposing remediation and convergence plans.
• Collaborate with Security, Governance, IT Risk Management, infrastructure, and business security teams on vulnerabilities, exceptions, and security impact assessments.
• Maintain technical documentation, operational procedures, security guidelines, and contingency plans. 
• Continuously improve vulnerability management processes, automation, reporting, and security controls. 

Qualifications

 Strong experience in Vulnerability Management, Security Compliance, and Operational Security within complex enterprise environments.
• Hands-on experience with Qualys and Tanium, including vulnerability, compliance, SelfAssessment, API, and Comply capabilities.
• Experience with security assessment and compliance tools such as PingCastle.
 • Good knowledge of ELK Stack, Power BI, and Power Query for security monitoring, analysis, and reporting.
• Strong understanding of security frameworks and standards including NIST, CIS Benchmarks, OWASP, ISO 27001, PTES, ISSAF, and OSSTMM.
• Good technical knowledge of Windows, Linux, Cloud, networking, infrastructure security, patch management, and system hardening.
 • Ability to perform detailed analysis of standard network protocols and security-related infrastructure behavior.
 • Scripting and automation skills using Python, PowerShell, and Regular Expressions (Regex).
• Experience managing vulnerability remediation processes, including SLA tracking, risk assessment, exception management, and stakeholder coordination.
• Ability to analyze technical vulnerabilities and translate findings into clear remediation actions for technical stakeholders. 
• Experience with Agile environments, project coordination, process design, and continuous improvement.
• Strong analytical, organizational, and problem-solving skills with high attention to detail.
• Strong communication and cross-functional collaboration skills.
• Fluent French, both written and spoken, and a good command of English.