Campus Pride Jobs

Job title : IT Cyber Security Expert

• Hybrid Working

• Location: Mexico

• Some travels expected to visit M&S sites

• Job type: Permanent

About the job

Our Team:

In the DIGITAL Cyber Security Department, we are seeking a Cybersecurity DevSecOps & Application Security Expert to join our VOC & Legal Ops Team. The role will primarily focus on application security and code review related to application development. The team is global and is responsible for monitoring the cyber risk level and reducing the attack surface.

Main responsibilities:

• Contribute to develop, improve, and promote the DevSecOps activity and associated processes and tools.

• Onboard business applications in DevSecOps processes, with a primary focus on application code review.

• Support the business stakeholders who are developing applications for Sanofi.

• Make understandable the Cyber risks and core review issues, and how to remediate.

• Promote the Cyber roadmap and key services.

• Promote Digital standard related to application development.

• Think Cyber-as-a-Service model to empower business stakeholders to take ownership of their applications’ security.

• Always contextualize the risk and ensure that it is understood. Strive to make the best decision and maintain the right balance.

• Do not trust but run checks and controls.

• Build automation everywhere you can and industrialize our cybersecurity processes.

• Lead and or contribute to Cyber in-house tools development (end-user web portal, technical services,…).

• Total scope of thousands business applications, written in many different languages. Source code hosted in GitHub.

• Strong objective to automate DevSecOps controls and limit cybersecurity human resources effort.

• International context and multiple third-party vendors and developers, with variable DevSecOps maturity levels.

• Strong partnership with Enterprise Architecture and some highly mature departments to define development practices and technologies evolution.

• Growing investments on IA projects, aligned with Data and AI strategy.

• Daily interactions with European and Americas-based colleagues.

About you

• Education :

• University/Master’s Degree in Computer Science, preferably in Cybersecurity.

• Experience :

• Expertise as a penetration tester at the application level.

• Expertise in OWASP and MITRE attack framework.

• Large knowledge in IT, development languages and frameworks and DevOps environments (GitHub), AWS and Azure cloud services.

• Scripting skills in Shell, Python, PowerShell are expected.

• Knowledge in containers technologies (RedHat OpenShift and Kubernetes)

• Leadership and strong communication skills with the ability to effectively convey complex security concepts to technical and non-technical stakeholders.

• Technical skills :

• Application Security and Penetration testing experience.

• Computer Programming skills, especially in Python,PowerShell, C#, Symfony and API Platform.

• Soft Skills :

• Curiosity and appetite for learning new technologies.

• Appetite for challenges

• Ability to translate complex technical stories into non-technical language is necessary.

• Languages :

• Excellent skills in English language

Pursue progress, discover extraordinary

Better is out there. Better medications, better outcomes, better science. But progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let’s be those people.

At Sanofi, we provide equal opportunities to all regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or gender identity.

Watch our ALL IN video (https://www.youtube.com/watch?v=SkpDBZ-CJKw&t=67s) and check out our Diversity Equity and Inclusion actions at sanofi.com (https://www.sanofi.com/en/our-responsibility/equality-and-inclusiveness) !

#LI-LATAM

Pursue progress , discover extraordinary

Better is out there. Better medications, better outcomes, better science. But progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let’s be those people.

At Sanofi, we provide equal opportunities to all regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, ability or gender identity.

Watch our ALL IN video (https://www.youtube.com/watch?v=SkpDBZ-CJKw&t=67s) and check out our Diversity Equity and Inclusion actions at sanofi.com (https://www.sanofi.com/en/our-responsibility/equality-and-inclusiveness) !

Sanofi is dedicated to supporting people through their health challenges. We are a global biopharmaceutical company focused on human health. We prevent illness with vaccines, provide innovative treatments to fight pain and ease suffering. We stand by the few who suffer from rare diseases and the millions with long-term chronic conditions.

With more than 100,000 people in 100 countries, Sanofi is transforming scientific innovation into healthcare solutions around the globe. Discover more about us visiting www.sanofi.com or via our movie We are Sanofi (https://youtu.be/96EwNjb1TLo)

As an organization, we change the practice of medicine; reinvent the way we work; and enable people to be their best versions in career and life. We are constantly moving and growing, making sure our people grow with us. Our working environment helps us build a dynamic and inclusive workplace operating on trust and respect and allows employees to live the life they want to live.

All in for Diversity, Equity and Inclusion at Sanofi - YouTube (http://www.youtube.com/watch?v=SkpDBZ-CJKw&t=2s)