Consultant, Cybersecurity

This is a fully remote position, open to applicants in France.

📋 Description

• Execute regulatory gap analyses in accordance with relevant cybersecurity regulations and standards, with a particular focus on the EU Cyber Resilience Act (CRA)

• Develop clear and actionable compliance roadmaps

• Conduct product risk evaluations, threat modeling, and vulnerability assessment reviews

• Offer structured recommendations aimed at mitigating security risks

• Generate technical reports and compliance documentation

• Convert technical findings into business implications and suggested remediation measures

• Adhere to internal quality protocols and ensure accurate documentation of project artifacts

• Assist in audit preparedness and ongoing improvement initiatives

• Provide guidance to clients throughout the engagement process

• Aid in scoping discussions with pre-sales teams

• Contribute to the internal repository of security and regulatory knowledge

• Share best practices and facilitate the onboarding and professional development of junior team members

• Plan and monitor billable activities, accurately log hours, and achieve engagement milestones and utilization targets

• Supply technical insights for scoping and proposal creation

• Represent Fime at industry events, including forums, conferences, webinars, or client interactions

⛳️ Requirements

• Between 2 to 6 years of experience in cybersecurity consulting, product security, certification/evaluation, or secure development

• Proficient understanding of the EU Cyber Resilience Act (CRA) and related frameworks such as EUCC, RED-DA, ETSI EN 303 645, and IEC 62443

• Experience with regulatory compliance and certification for connected products

• Practical experience with threat modeling for connected environments and methodologies for risk assessment/risk management

• Familiarity with secure development lifecycle (SDL) practices in product or embedded engineering teams

• Experience participating in conformity assessments, audits, or formal certification processes

• Master’s degree (Bac+5 or equivalent) in Cybersecurity, Computer Science, Electrical/Electronic Engineering, Embedded Systems, or a related engineering discipline

• Understanding of secure development lifecycle (SDL), including the establishment of security goals, objectives, and controls with suitable traceability

• Knowledge of application security fundamentals, including OWASP

• Basic understanding of applied cryptography, including key management concepts

• Awareness of firmware and hardware security analysis

• Proficiency in both French and English (spoken and written)

• Capability to navigate complexity and ambiguity with a customer-centric and collaborative approach

• Strong communication skills

• Ability to organize and align work with project priorities and deadlines

• Flexibility and eagerness to quickly learn new standards and technologies

🏝️ Benefits

• Permanent, full-time employment