Ingénieur DevSecOps / cybersécurité (F/H)

Job summary

This internship focuses on building a vulnerability management platform that determines which published vulnerabilities apply to the software, components, and applications in an information system. The work includes consolidating vulnerability data, automating software inventory through REST APIs, correlating products and versions with CVEs, and helping security teams visualize and prioritize remediation using Python, Docker, and standards such as CVSS, CPE, CWE, PURL, and SBOM.

Qualifications

• Pursuing the final year of an engineering degree or a Master 2, with a specialization or strong interest in cybersecurity, software development, or DevSecOps.
• Good software development fundamentals, ideally in Python.
• Comfort with REST APIs and automation.
• Interest in application security and vulnerability management.
• Curiosity about how applications, components, and dependencies interact.
• Ability to work with and structure technical data.
• Analytical, rigorous, and autonomous.

Responsibilities

• Collect and consolidate vulnerability data from MITRE, NVD, CERT, and software vendors.
• Automate inventories of software, components, and versions through APIs.
• Correlate products, versions, CVEs, and applications.
• Use vulnerability and software component standards, including CVE, CVSS, CPE, CWE, PURL, and SBOM.
• Develop rules to determine which vulnerabilities apply to the organization's environment.
• Design and develop a platform to centralize vulnerability management.
• Enable security teams to visualize, track, and prioritize vulnerabilities for remediation.
• Document the solution and contribute to its integration with the existing security ecosystem.

Skills

Degrees

Industry

Relocation