- Employment
- Contract
- Seniority
- Mid-Level
- Department
- IT & Technology Systems
- Posted
- Sep 29, 2026
About Hermès
This prestigious fashion house, renowned for its timeless elegance and innovative designs, is a part of a leading global luxury conglomerate. The brand is committed to excellence and offers a dynamic environment where creativity and business acumen are equally valued.
The CERT team at Hermès seeks a cybersecurity analyst to join its global incident detection and response operation on a 24-month international volunteer assignment (VIE) based in Shanghai. Following a 3–6 month onboarding period in Paris (Campus Cyber and Pantin), the successful candidate will support security operations across Hermès worldwide locations, working in a Follow the Sun model with teams in Paris, New York, Tokyo, and Shanghai. Responsibilities are split between operational incident management (50%) and continuous detection capability enhancement.
Role & Responsibilities
- Analyze, investigate, and remediate security alerts and incidents from multiple sources including EDR, Active Directory, Firewall, Proxy, AV/EPP, VPN, Email Gateway, and endpoint logging systems
- Integrate and parse new log sources to expand monitoring capabilities
- Conduct log analysis and threat intelligence monitoring to identify novel detection scenarios
- Develop use cases for SIEM and EDR platforms
- Participate in Purple Team exercises to validate detection logic
- Reduce attack surface by blocking tactics, techniques, and procedures (TTPs) across cybersecurity solutions
- Contribute to documentation and process improvement initiatives within the CERT team
- Produce both tactical and strategic cyber threat intelligence (CTI) and maintain vigilance on emerging threats
Qualifications
- Bachelor's degree (Bac+5) in information technology or cybersecurity preferred
- Minimum 2 years of professional experience in a SOC, CSIRT, or CERT environment
- Advanced proficiency with Windows and Linux operating systems
- Deep understanding of malware techniques, threat vectors, and attack paths
- Comprehensive knowledge of detection techniques and threat mitigation strategies
- Demonstrated ability to communicate complex security incidents and risks in clear, accessible terms
- Critical thinking and intellectual curiosity regarding cybersecurity developments
- Self-directed, organized, and meticulous work approach
Skills
Experience
Minimum 2 years of equivalent experience within a SOC, CSIRT, or CERT team. Candidates must document 2 full years of professional experience (excluding internships and apprenticeships) since obtaining their most recent diploma. For the China posting, candidates must satisfy the additional requirements outlined by the French government's VIE program for assignments in China.
Education
Bachelor's degree (Bac+5) in information technology or cybersecurity. Candidates must be between 18 and 28 years old at the time of registration, with departure occurring no later than the 29th birthday.
Culture
The company fosters a collaborative and innovative culture, encouraging employees to push the boundaries of creativity while maintaining a strong commitment to sustainability and ethical practices.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Hermès, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Security Operations Center Analyst», «Cybersecurity Incident Response Specialist», «SOC Analyst», «Security Incident Analyst», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.