Ercom, a Thales group company, is seeking a Security Engineer to join its security team at Campus Cyber, France. The role involves defining security functions for products like Citadel Team and Cryptobox, designing secure deployment principles, ensuring security levels through continuous maintenance and best practices, and documenting/representing security principles for certifications and audits. The engineer will collaborate closely with engineering, deployment, and operations teams, and interact with auditors and ANSSI.

Must Have

• Participate in defining security functions for developed products
• Choose protocols and standards
• Specify security and GDPR constraints to integrate
• Participate in designing product deployment principles
• Define and create secure architectures, segregation
• Maintain security conditions of used software
• Implement good administration, configuration, and supervision practices
• Validate delivered software (development security, non-regression, security function tests)
• Act as a referent contact for security topics for client organizations
• Participate in the approval and maintenance of deployed services
• Intervene in software certification
• Document chosen/adopted security principles
• Organize reviews, internal and/or external audits
• At least 5 years of experience in IT security
• Bac+5 and/or Engineer degree in IT and/or IT security
• Skills in cryptology (TLS, X509, ECDH), Linux, Docker, Kubernetes, Vault, Gitlab-ci, Android, IOS, Python, JS, encryption

Perks & Benefits

• Attractive compensation package
• Continuous skills development (training, academies, internal communities)
• Inclusive, benevolent environment respecting employee balance
• Recognized societal and environmental commitment

Build a future of trust together

Thales is a global leader in high technologies specializing in three sectors: Defense & Security, Aerospace & Space, and Cyber & Digital. It develops products and solutions that contribute to a safer, more environmentally friendly, and more inclusive world. The Group invests nearly 4 billion euros per year in Research & Development, particularly in key innovation areas such as AI, cybersecurity, quantum, cloud technologies, and 6G. Thales has nearly 81,000 employees in 68 countries.

Our commitments, your benefits

• Success driven by our technological excellence, your experience, and our shared ambition.
• An attractive compensation package.
• Continuous skills development: training courses, academies, and internal communities.
• An inclusive, benevolent environment that respects employee balance.
• Recognized societal and environmental commitment.

Your daily life

Ercom is a Thales group company developing solutions and services for securing communications, data, and terminals based on technological expertise in telecom infrastructure, cloud, cryptography, and software. Our solutions are ANSSI certified and equip public and private actors in France and abroad.

You will be integrated into the team bringing together the products and services:

• Citadel Team: secure messaging, calling, and conferencing solution for professionals, sovereign and easy to use.
• Cryptobox: secure collaboration and file sharing solution.

These two products are designed, hosted, and operated by Ercom.

The position is located in La Défense at CyberCampus, you will report to the security team manager.

Within the Security team, the Security Engineer participates in providing a "secure" service with a labeling objective.

As such, your missions will be to:

Participate in defining the security functions of the developed products:

• Security functions to implement.
• Choice of protocols and standards.
• Specifications of security and GDPR constraints to integrate.

Participate in the design of product deployment principles:

• Rules for administration and monitoring of solutions.
• Definition and creation of secure architectures, segregation, etc.
• Choice of service providers.

Guarantee the security level:

• Maintaining the security conditions of the software used.
• Good administration, configuration, and supervision practices.
• Methods for validating delivered software (development security, non-regression, security function tests).
• Referent contact for security topics for client organizations.

Document and represent:

• Participate in the approval and (its maintenance) of deployed services.
• Intervene in the certification of software.
• Document the chosen/adopted security principles.
• Organize reviews, internal and/or external audits.

You will be in close contact with the engineering, deployment, and run teams. You may also be required to interact with auditors, Group security contacts, and ANSSI.

Your profile:

Do you have the ambition to work on high-tech projects?

Do you have at least 5 years of experience in IT security?

Do you have a Bac+5 and/or Engineer degree in IT and/or IT security and have skills in:

• Cryptology: TLS, X509, ECDH, etc.
• OS: Linux
• Applications: Docker, Kubernetes, Vault, Gitlab-ci
• Development: Android, IOS, Python and JS
• Encryption

Are mastery of English, rigor, and organization recognized strengths of yours?

Then this position is for you!

Thales, a Handi-Engaged company, recognizes all talents. Diversity is our best asset. Apply and join us!

As the position may require access to information relating to national defense secrecy, the selected person will be subject to a security clearance procedure, in accordance with the provisions of articles R.2311-1 et seq. of the Defense Code and IGI 1300 SGDSN/PSE of August 09, 2021.