Information Security Apprentice

We are looking for an Information Security Analyst apprentice to join our Security & IT team. This is a work-study position (contrat d'apprentissage) for a student in cybersecurity, information systems, or a related field, who wants to learn how security actually works inside a fast-growing B2B SaaS company. The apprentice will report to the Security & IT Manager, who will also be their tutor (maître d'apprentissage) throughout the contract.

Responsibilities

Take part in recurring security calendar activities: vulnerability scanning campaigns, quarterly access reviews, business continuity tests, and policy review cycles; Triage security and vulnerability findings from AWS (GuardDuty, Inspector, Security Hub), CrowdStrike Falcon, and other sources, prioritize them, and follow remediation through to closure with engineering teams; Help monitor and respond to security alerts and incidents, and contribute to incident documentation and post-incident reviews; Support endpoint security through JAMF and CrowdStrike Falcon, and help keep device baselines healthy; Learn how identity and access management works (Google Workspace, SSO, MFA) and help keep it tight; Run periodic access reviews across critical systems and surface findings to the team; Help harden internal workflows around access, data handling, and SaaS usage; Help maintain the ISO 27001 management system, including controls documentation, evidence, and corrective actions; Contribute to internal, surveillance, and recertification audits, including the unified audit covering all three business units; Support the implementation of HIPAA controls; Contribute to security reviews of new tools, vendors, and SaaS applications; Help answer security questionnaires, RFPs, and customer due diligence requests; Contribute to security awareness across the company (training content, phishing simulations, internal communication); Get exposure to AI governance, SaaS governance, and integration of acquired entities into the ISO scope

Requirements

Enrolled in a degree program (Bac+3 to Bac+5, e.g. Licence pro, Master, or engineering school) in cybersecurity, information systems, computer science, or a related field, and eligible for an apprenticeship contract in France; Foundational understanding of information security concepts: networks, operating systems, identity and access, common threats and vulnerabilities; Curiosity and a hands-on mindset, comfortable learning new tools quickly; Interest in automation and AI tooling to speed up recurring work; Rigor and reliability: recurring security work depends on things being done on time and documented properly; Professional French and strong written and spoken English

Nice to have

First exposure to a cloud provider (AWS in particular), Linux, or scripting (Python, Bash); Awareness of ISO 27001, GDPR, or other security and privacy frameworks; A personal project, CTF participation, home lab, or certification (e.g. CompTIA Security+, ISC2 CC, AWS Cloud Practitioner) that shows your interest in the field