Junior Penetration Tester - Apprenticeship (f/m/d)

Description du poste:

THE SECURITY UNITED
At Decathlon Digital, we are powering the future of connected sport by designing the world's largest digital sports platform. Driven by our tech teams based in Lille, Paris, and internationally, we leverage cutting-edge technological innovations to optimize our entire value chain, create unique immersive experiences, and accelerate the circular economy. Our ambition? To combine technological performance, accessibility, and social responsibility to make sport sustainably accessible to as many people as possible. Joining Decathlon Digital means becoming part of an agile, collaborative, and forward-thinking environment, where every line of code and every security building block contributes to a positive global impact through our Tech4Good approach.
JOIN THE CYBER DEFENSE TEAM You will join a team of cybersecurity enthusiasts who safeguard our global ecosystem daily. By combining offensive (Red Team) and defensive (Blue Team) visions, our experts simulate cyberattacks, hunt for vulnerabilities, and design the most advanced detection rules to secure Decathlon.
In the framework of an open work-study position, we are recruiting a Junior Cybersecurity Engineer (Apprenticeship), based in Lille.
YOUR MISSIONS
* You will contribute to evaluating our security posture by mapping existing detection rules onto the MITRE ATT&CK framework to identify and bridge defensive blind spots.

* You will participate in attack simulations using frameworks like Atomic Red Team to validate proper alert generation within the EDR and SIEM.

* You will participate in post-Pentest follow-ups by managing the vulnerability lifecycle through to final remediation and transformation into concrete defensive rules.

* You will contribute to developing, customizing, and obfuscating offensive tools (Red Team Tooling) by experimenting with the use of Generative AI.

* You will participate in creating and updating our technical Playbooks to enrich the team's knowledge base, while shadowing senior analysts during complex penetration tests.
YOUR TECHNICAL ENVIRONMENT
* Cyber Frameworks & Concepts: MITRE ATT&CK, OWASP Top 10, Atomic Red Team, EDR, SIEM.

* Scripting & Automation: Python, PowerShell, Bash.

* Methodologies & Tools: AI / LLM (Prompt Engineering), Windows/Linux environments and Active Directory, Cloud basics (GCP/AWS) & Containerization.
WHAT YOU NEED TO SUCCEED
* A significant first experience (university projects, internship, work-study) or regular practice in labs/CTFs (TryHackMe, Root-Me, HackTheBox) within the cybersecurity field.

* Pursuing a Master 1 or Master 2 degree minimum, specializing in Cybersecurity.

* A strong understanding of classic attack mechanisms, solid foundations in system/network administration, and proficiency in using Generative AI for coding tasks.

* An excellent "out-of-the-box" analytical mindset and the ability to communicate fluently in both French and English.

* A strong appetite for teamwork and a culture of knowledge sharing.

* An interest in the impact of sport on personal and collective development.

* The desire to join a company committed to Tech4Good and responsible innovation.
WHY JOIN US?
At Decathlon, we make it a point of honor to offer a fulfilling and motivating work environment