Hermès Vulnerability Operations Analyst (VIE)

About Hermès

This prestigious fashion house, renowned for its timeless elegance and innovative designs, is a part of a leading global luxury conglomerate. The brand is committed to excellence and offers a dynamic environment where creativity and business acumen are equally valued.

Role & Responsibilities

• Track and manage vulnerabilities identified across China, Japan, and South Asian scopes from detection through qualification, remediation, re-testing, and closure
• Pilot the complete vulnerability lifecycle, prioritizing findings based on criticality and local business context
• Maintain regular reporting to the VOC Paris team on remediation progress, blockers, and strategic updates
• Participate in scoping externalized penetration tests for China-based assets, including definition of scope, objectives, and rules of engagement
• Coordinate with third-party security vendors mandated for penetration testing delivery and service level compliance
• Analyze and communicate penetration test results to relevant regional teams and stakeholders
• Track and monitor remediation of findings arising from security assessments
• Advise regional IT teams on vulnerability remediation best practices adapted to local technical and organizational contexts
• Serve as the primary interface between field teams and the central VOC unit in Paris
• Contribute to internal tool optimization and vulnerability management process improvements
• Document and transfer domain knowledge to strengthen institutional practices

Qualifications

• Bachelor's degree (BAC+5 equivalent) in computer science, information technology, or cybersecurity
• Minimum one year of professional experience in vulnerability management or a Vulnerability Operations Center environment
• Age 18–28 at the time of enrolment (deployment must occur no later than the 29th birthday)
• French or European Economic Area (EEA) national
• Full compliance with French national service obligations (journée de défense et de citoyenneté)
• Clean criminal record and current civil rights status
• Physical fitness certification as required by the host organization
• Demonstrated expertise in offensive cybersecurity and active monitoring of threat intelligence, emerging attack techniques, and security tools
• Comprehensive understanding of vulnerability types including OWASP Top 10, system-level, network, Active Directory, and Entra vulnerabilities
• Ability to independently reproduce vulnerabilities from penetration test reports and vulnerability descriptions
• Proficiency with Windows and Linux operating systems
• Scripting capabilities in Python
• Fluent English proficiency (mandatory)

Skills

Experience

Minimum one year of professional experience in vulnerability management, ideally within a Vulnerability Operations Center or offensive security team. Demonstrated hands-on exposure to the full vulnerability lifecycle and third-party security assessment coordination.

Education

Bachelor's degree (BAC+5 equivalent) in computer science, information technology, cybersecurity, or a related technical discipline. Equivalent professional certifications in cybersecurity (OSCP, CEH, GIAC) may be considered as partial substitutes.

Workplace

Culture

The company fosters a collaborative and innovative culture, encouraging employees to push the boundaries of creativity while maintaining a strong commitment to sustainability and ethical practices.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.