Technical Lead

The VOC Offensive Security Expert is responsible for:

• Perform penetration testing on Saint-Gobain applications:

oConduct Pentests (on web app, ERP, SAP systems as well as infra-assets)

oDraft Business risk-oriented reports

oAssist the business and the project in correcting the identified vulnerabilities

• Lead penetration testing of corporate applications (Web & Thick Client), infrastructure, and OT/ICS systems (including industrial plant assessments).
• Conduct in-depth reviews of Active Directory, covering attacks, privilege escalation, lateral movement, and persistence operations; develop mitigation strategies.
• Perform hands-on adversary simulation using frameworks such as MITRE ATT&CK, TIBER-EU, and NIST, and leveraging advanced offensive platforms (e.g., Cobalt Strike, Empire, Metasploit, BloodHound).
• Lead and coach purple teaming activities, working with both offensive and defensive teams to close detection gaps.
• Develop advanced scripts and custom security tooling for Security tool bypass (EDR,Firewalls), exploit development, and automation for red team operations.
• Direct OSINT and reconnaissance processes for mergers, acquisitions, and external company profiling.
• Actively contribute towards automations & Process maturity.
• Present highly detailed business risk reports to technical, operational, and executive stakeholders; facilitate workshops and recommendations.
• Mentor junior team members, drive skill development, and establish new offensive testing methodologies.