Cybersecurity Evaluator Engineer M/F

Build a future of trust together

Thales is a global high-tech leader specializing in three business sectors: Defense & Security, Aeronautics & Space, and Cyber & Digital. It develops products and solutions that contribute to a safer, more environmentally friendly, and more inclusive world. The Group invests nearly 4 billion euros per year in Research & Development, particularly in key innovation areas such as AI, cybersecurity, quantum, cloud technologies, and 6G. Thales has nearly 81,000 employees in 68 countries.

Our commitments, your benefits

• Success driven by our technological excellence, your experience, and our shared ambition
• An attractive compensation package
• Continuous skill development: training courses, academies, and internal communities
• An inclusive, benevolent environment respecting employee balance
• Recognized societal and environmental commitment

Your daily life

By joining the Toulouse site, you will integrate a site bringing together our sovereign cyber defense solutions to face growing cyber threats and our digital services activities enabling us to operate our clients' critical information systems and support them in their secure digital transformation.

Based in Toulouse, CESTI THALES (40 people) provides information security evaluation and expertise services.

Its role: to find and exploit security flaws in the products or systems entrusted to it by its clients.

Approved for Common Criteria and CSPN evaluations by ANSSI (National Agency for the Security of Information Systems) and by numerous private evaluation schemes, the team of experts works on a multitude of products ranging from simple smart cards to satellite equipment.

In this capacity, your missions will be to:

• Take charge of the in-depth analysis of the architectures, components, and security mechanisms of solutions integrating artificial intelligence, in compliance with current standards or norms (e.g., Common Criteria, CSPN).
• Design, plan, and carry out intrusion tests, exploitation of vulnerabilities specific to AI systems (adversarial attacks, training data protection, model robustness, etc.).
• Understand the particular risks related to AI systems (e.g., model bias, information leaks, manipulations, attacks on data set integrity) and master appropriate mitigation measures.
• Prepare technical and summary reports for clients, solution publishers, and competent authorities, presenting identified vulnerabilities, risks, and recommendations.
• Stay informed of regulatory, normative, and technological developments related to the security of AI solutions, in order to apply best practices during evaluations.
• Interact with development teams, certification authorities, and other stakeholders to share evaluation progress, clarify security requirements, and participate in specialized workshops or working groups.
• Participate in the evolution of internal procedures and evaluation methodologies to address emerging challenges related to AI.

Your profile:

Do you have the ambition to work on high-tech projects?

Do you have at least 5 years of experience in cybersecurity, more particularly as an evaluator?

Do you have a Bac+5 and/or Cybersecurity Engineer degree and have skills in:

• Security standards (Common Criteria, CSPN, etc).
• Vulnerability analysis and security testing (pentest, fuzzing, attacks, etc.)
• Writing evaluation reports

Mastery of embedded systems and programming languages would be a plus.

Joining CESTI Thales means joining a laboratory where technical excellence is at the heart of everything we do.

We work on varied and stimulating projects, and for globally recognized clients, which pushes us every day to surpass ourselves and stay at the forefront of technologies.

Our strength? A close-knit, human-sized team where cohesion and mutual aid are natural.

If you like technical challenges, continuous learning, and working with passionate experts, you are in the right place.

Are mastery of English, rigor, and organization recognized assets for you?

Then this position is for you!

Thales, a Handi-Engaged company, recognizes all talents. Diversity is our best asset. Apply and join us!

The position may require access to information relating to national defense secrecy, the selected person will be subject to an authorization procedure, in accordance with the provisions of articles R.2311-1 et seq. of the Defense Code and IGI 1300 SGDSN/PSE of August 09, 2021.