Auditrice​/Auditrice en sécurité des systèmes d'information - XPN SecEng

Job Title

Security Engineer

Groupe RIFSEEP: 2 Your main activities:
In the context of its digital transformation, the DGPN (Direction Générale de la Police Nationale) modernizes its procedure writing system to replace the LRPPN (Logiciel de Rédaction des Procédures de la Police Nationale). Within the ANFSI (Agence du numérique des forces de sécurité intérieure), the project's lead agency, the holder will join a technical direction formed as a product team integrated into the XPN pole.

Main missions:
The holder acts as a technical security (Security Engineer) reference integrated into the development cycle. Unlike a compliance role, its mission is operational: to guarantee the security tightness of the code and infrastructures through direct intervention in the production chain.

1. Securing the development cycle (App Sec & Dev Sec Ops ):
Ensure the security "sign-off" on critical commits and Pull Requests (PR) before fusion. Conduct thorough code reviews to identify vulnerabilities and design errors. Design, develop, and directly implement patches (patches) in the source code and submit the corresponding commits. Define, configure, and orchestrate automated security tests (SAST, DAST, SCA) within the CI/CD pipeline.

2. Technical audit and vulnerability management:
Conduct penetration tests (pentests) and vulnerability analyses on IT components. Take charge of resolving identified flaws and security incidents, either through direct development of the patch or through close technical support to developers. Take the lead on the technical response to security incidents: log analysis, investigation, identification of the origin of the flaw, and containment. Provide an expertise, advice, and monitoring mission for the technical teams.

Activities of the service The L'ANFSI receives its instructions from the two directors general of the Gendarmerie and the Police. It is responsible, in conjunction with the operational directions, to design and implement the "business" information and communication systems essential to the execution of internal security missions. Composition and staffing of the service The L'ANFSI is composed of six directions. The staff includes police officers, technical and specialized administrative personnel of the national police, military and civilian personnel of the national gendarmerie, as well as contractual personnel.

The total staff of the service is equal to 536. The service is headed by a general of corps d'armée, who has as his deputy an inspector general of police.

Hierarchical links Attachment to the technical direction of the XPN program Functional links ANFSI, DGPN, DGGN, DNPJ, SSMSI

Your main skills implemented

Experience:

Bac+5 in computer science or cybersecurity. Significant experience (3 to 5 years minimum) in application security (App Sec), as a security engineer or technical audit/pentest consultant with a strong development component. Technical knowledge:
Software Development:
Advanced mastery of the development languages used by the project (Java, React or equivalents). Demonstrated ability to produce robust and secure code:
Mastery level required. Audit & App Sec:
Mastery of web vulnerabilities, static analysis (SAST) and dynamic analysis (DAST):
Mastery level required. Dev Sec Ops  & Git:
Perfect mastery of versioning (Git), pull request workflows, and the integration of security tools into CI/CD pipelines:
Mastery level required. Infrastructure:
Knowledge of containerized environments (Docker, Kubernetes) and secure ministerial cloud:
Practical level required. Security tests:
Mastery of scanning and pentest tools (Burp Suite, OWASP ZAP, etc.):
Mastery level required. Know the professional environment: mastery level required Have computer skills - office: expert level required Know how to work in a team: mastery level required Have a synthesis spirit: mastery level required Know how to apply the regulation: mastery level required Know-how:
Know how to communicate: mastery level to acquire Have a sense of human relations: mastery level required

Contact persons srgc.drh.anfsierieur.gouv.fr

Ad…