Job description
Vates is a French software company specializing in virtualization, offering a credible alternative to proprietary solutions on the market. Our Vates VMS solution enables companies to manage their IT infrastructures in a simple, efficient, and controlled way.
We are looking for a PSIRT Analyst to help secure our XCP-ng and Xen Orchestra solutions by analyzing vulnerabilities, coordinating fixes with our development teams, and contributing to the continuous improvement of our product security.
Your Responsibilities:
Follow product security incidents :
-Contributing to the monitoring and the triage of vulnerabilities across Vates products
-Analyzing vulnerabilities and providing accurate severity assessments to help the product team make informed decisions
-Coordinating the correction with the product teams and monitor the remediation deadlines
-Participating in the backport effort of fixes
-Writing and publishing security advisories for Vates products
PSIRT continuous improvement :
-Tracking recurrent vulnerabilities and provide recommendations for security improvements
-Contribute to the development of automation tools within the PSIRT
-Review and improve the process with the security team
Required Skills:
-Ability to read code (C, python, etc) and understand software or network architectures
-Initial experience in security incident management and response
-Knowledge on vulnerabilities: Most common CWE / MITRE ATT&K experience
-Interest in learning packaging for distributions if no previous background
-Knowledge of distribution packaging systems
-Knowledge of RPM-based distribution and their packaging system
-Good communication skills
-Problem solving mindset
-Detail-oriented
Why join us ?
At VATES, you will find a flexible work environment, a supportive and approachable team, and a role that makes a real impact on a daily basis.
Location:
Our offices are based in Grenoble or Paris, but we operate on a fully remote model to provide greater flexibility and daily work comfort.
You are free to work 100% remotely or come on-site occasionally, depending on your preferences.
Benefits:
-Health insurance coverage funded at 50% by the company
-Benefits provided by the Works Council (employee discounts, cinema tickets, etc.)
-Employee savings plan (PEE)
-Profit-sharing scheme
-Annual bonus
-100% remote work
As part of our diversity and inclusion policy, this position is open to all candidates, regardless of gender.
Profile required
Are you passionate about cybersecurity, vulnerability analysis, and open-source software?
Do you enjoy solving complex technical problems and collaborating with development teams ? Then join us !
We are looking for someone with:
-A master degree in computer science
-At least 3 years experience in a R&D security team or in a CERT/CSIRT specializing in AppSec incident.
-Fluent in English and French.
Company description
Vates is a French software company specializing in Open Source and virtualization, with a strong commitment to open and collaborative development. Our main projects, Xen Orchestra and XCP-ng, cover the entire virtualization stack — from the hypervisor (Xen) and the virtualization platform (XCP-ng) to virtual machine management and backup (Xen Orchestra).
Our team is distributed across several countries and fully embraces remote work, with transparent working methods and accessible communication channels. At Vates, we are driven by a people-centered company culture focused on kindness, inclusivity, and a flat organizational structure. Every team member is encouraged to contribute ideas, make decisions, and grow with the company.
Our Open Source model is at the core of everything we do — not only in our code, available on GitHub and GitLab, but also in our collaborative approach with the community. We believe in an “upstream first” philosophy, and we dedicate our expertise and resources to fundamental projects such as Xen, while supporting contributors of all levels in joining us on this journey.
On 10/26/2026