Hermès External Exposure and Oversight Lead

About Hermès

This prestigious fashion house, renowned for its timeless elegance and innovative designs, is a part of a leading global luxury conglomerate. The brand is committed to excellence and offers a dynamic environment where creativity and business acumen are equally valued.

Role & Responsibilities

• Define and execute the external surface monitoring strategy, including coverage scope and implementation means (scanners, audits, bug bounty programs, etc.)
• Propose and establish new approaches to enhance attack surface management and contribute to Hermès' overall offensive security strategy
• Manage and mentor a team of offensive security experts and vulnerability management specialists, overseeing their professional development and skill enhancement
• Oversee bug bounty program governance, including reward policy definition, vulnerability triage, stakeholder coordination, budget tracking, and continuous improvement
• Exploit internal EASM tools, analyze external scan results, detect weak signals, and drive reduction of attack surface exposure
• Design and maintain automation solutions for orchestration, alerting, and aggregation of data from multiple EASM sources
• Lead technical response and active participation in cybersecurity crisis cells when critical external asset discoveries occur
• Monitor emerging vulnerabilities, attack techniques, and offensive security tools; maintain awareness of evolving threat landscape
• Organize and oversee penetration testing activities across the perimeter in coordination with internal security teams
• Qualify and assess the operational impact of critical vulnerabilities; formulate remediation recommendations and track their implementation
• Conduct internal audits to validate effective remediation of vulnerabilities flagged as critical
• Provide strategic support to vulnerability operations teams in defining vulnerability prioritization frameworks for external surface findings

Qualifications

• Proven experience in vulnerability management and offensive security
• Demonstrated expertise in coordinating penetration tests and red team operations
• Mastery of vulnerability management tools and penetration testing techniques
• Recognized management and organizational capabilities
• Strong communication and cross-functional collaboration skills
• Proficiency in ethical hacking techniques and security standards (OWASP, MITRE ATT&CK, etc.)
• Knowledge of offensive security monitoring tools
• Proficiency in scripting languages (Python, Bash, PowerShell) and API-based task automation
• Solid understanding of Windows and Linux environments, cloud architectures, DNS services, and exposed web environments

Skills

Experience

Minimum three years of confirmed experience in vulnerability management and offensive security, with demonstrated expertise in pentesting coordination and red team leadership. Proven track record of managing security teams and implementing attack surface management initiatives at scale.

Education

Not specified

Workplace

Culture

The company fosters a collaborative and innovative culture, encouraging employees to push the boundaries of creativity while maintaining a strong commitment to sustainability and ethical practices.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.