{"id":4159826,"url":"https://alion.io/job/savane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops","title":"Ingénieur Sécurité Opérationnelle - Vulnérabilités / DevSecOps","company":{"id":3909440,"name":"Savane Group","domain":"savane-group.com","url":"https://alion.io/company/savane-group","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"D","score":40,"open_postings":13,"ghost_share":1,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":60000,"max":80000,"currency":"EUR","period":"year","gross":null,"usd_annual":88791},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false}],"status":"live","first_seen_at":"2026-11-12T09:49:21Z","employer_posted_date":null,"last_verified_at":"2026-11-12T09:49:21Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Contexte de la mission\nAu sein de l'équipe Cybersécurité d'un grand groupe industriel international du secteur de l'énergie, en pleine transformation IT, vous prenez en charge la gestion des vulnérabilités et la maîtrise des risques liés aux tiers.\n\nRéférent technique et méthodologique, vous maintenez les outils de gestion des vulnérabilités (SAST / DAST) et d'évaluation de la chaîne d'approvisionnement (Third-Party Risk Management), en lien étroit avec les équipes IT, DevOps et métiers.\n\nMissions principales\n\n1. Gestion des vulnérabilités serveurs et patching\nDéployer et superviser l'automatisation des scans de vulnérabilités sur l'ensemble du parc de serveurs.\nDéfinir et piloter un calendrier de remédiation basé sur le risque, en priorisant les vulnérabilités critiques et élevées.\nAtteindre et maintenir le taux de conformité des serveurs selon les standards de sécurité établis.\n\n2. Sécurité applicative et DevSecOps (SAST / DAST)\nAdministrer les solutions d'analyse de sécurité applicative au sein des pipelines CI/CD.\nDéfinir et faire respecter les seuils de couverture de tests sur les applications critiques, avec des scans systématiques avant mise en production.\n\n3. Gestion du risque fournisseurs et tiers (TPRM)\nConcevoir et formaliser un cadre standardisé d'évaluation de la sécurité des tiers (questionnaires, audits, scorecards).\nPiloter les plans de remédiation des fournisseurs à haut risque.\nMettre en place une surveillance continue de la posture de sécurité des partenaires clés.\n\n4. Excellence opérationnelle et collaboration transverse\nAppliquer une démarche Lean et d'amélioration continue aux processus cybersécurité.\nIdentifier et traiter les causes racines des blocages opérationnels.\nProduire les rapports d'impact, les plannings de remédiation et les évaluations de sécurité des partenaires.\nProfil recherché\nProfil recherché\nFormation Bac +5 et minimum 5 ans d'expérience dans un rôle similaire (Ingénieur Sécurité Opérationnelle, Responsable Gestion des Vulnérabilités ou Risques Tiers).\nSolide expertise des outils de scan d'infrastructure et des stratégies de patch management.\nMaîtrise des outils et démarches SAST / DAST et de leur intégration dans les pipelines CI/CD.\nBonne maîtrise des frameworks d'évaluation des tiers et de gestion des risques.\nConnaissance ou forte appétence pour les démarches d'amélioration continue et Lean.\nEsprit d'analyse, rigueur dans le suivi des KPI, pédagogie et capacité à fédérer des équipes transverses (DevOps, IT Ops, Achats).\nAnglais professionnel indispensable (contexte international).\n\nEnvironnement technique\nSécurité : gestion des vulnérabilités, patch management, SAST, DAST, TPRM\nMéthodologies : DevSecOps, CI/CD, Lean","description_format":"text","description_chars":2707,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-12T11:56:15Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["seen:1","stale_co","velocity","win:early"],"computed_at":"2026-11-14T05:58:10Z"},"pay":{"stated_usd_annual":88791,"is_top_pay":false},"html_url":"https://alion.io/job/savane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops","json_url":"https://alion.io/job/savane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops.json","meta":{"generated_at":"2026-11-15T04:44:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":431,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3909440},"rest":"https://alion.io/mcp/rest/get_company?id=3909440"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsavane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsavane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsavane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/savane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsavane-group-ingenieur-securite-operationnelle-vulnerabilites-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4159826}},{"tool":"search_jobs","arguments":{"company":"savane-group.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4159826},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}