Cyber Security Expert

Job title: Cyber Security Expert

• Location: Hyderabad

Through the Critical Vulnerability Management (CVM) Program, the Vulnerability Operations Center - one of the pillars of the Vulnerability Operations Center & Legal Ops Team - aims to provide quick analysis and response to events related to vulnerabilities that could significantly increase Sanofi’s level of risk regarding cyber-attacks.

To do so, a watch has been organized for:

• Tracking emerging vulnerabilities using threat intelligence feeds

• Handling potential critical vulnerabilities

• Identifying critical exploit scenarios

• Coordinating with various Digital Operations Teams for mitigation or remediation

The position is crucial for swiftly reducing Sanofi’s exposure to high-risks and cyber threats. It combines both technical depth with strategic impact, involving hands-on incident response when on-shift and focuses on process improvement and automation design when off-shift.

What You’ll Do

When you are on-shift, your activity is to focus on responding. You are the point of contact for all matters related to alerts. This includes escalation, documentation, reporting and adhoc response.

• Alongside L1/L2 Analysts, you participate in the daily alert triage, helping with prioritisation depending on the threat level and potential impact.

• After the daily alert triage, you take ownership of alerts and drive them to resolution through investigation and stakeholders engagement.

• You involve IT stakeholders in the risk assessment, and you coordinate implementation of remediation or mitigation actions.

• You provide feedback to L1/L2 Analysts to improve analysis quality and consistency.

When you are off-shift, your activity is to focus on building. You participate in scope extension and automation.

• You identify opportunities to improve detection, triage, and response processes.

• You translate ad-hoc L3 procedures into repeatable L1/L2 workflows.

• You collaborate with the Cortex XSOAR developer to implement automation related to the CVM Program.

• You work with IT and Cyber teams to enhance asset visibility and attack surface detection.

Profile we expect

Experience and competencies

• Significant Cybersecurity Experience in vulnerability management, incident response, and/or SOC environments.

AND/OR

• IT Experience in infrastructure and/or operations.

• Analytical Skills to assess technical risk and uncover critical exploitation paths.

• Clear Communication to coordinate effectively across IT and Cyber teams.

• Familiarity with Tools like:

• • Orchestration/ticketing systems (e.g., XSOAR, ServiceNow)

  • Vulnerability scanners (e.g., Tenable, Qualys)

  • Data Analysis tools (e.g., SQL, Power BI, Excel)

You don’t need to know our exact stack, but experience with similar tools will help you ramp up quickly.

• Process Mindset to improve and document repeatable workflows.

• Curiosity & Initiative to explore how systems and teams interact.

English is the primary working language. Additional languages are a plus but not required.

Mindset and soft-skills

As a member of our transversal Cyber team, collaborating closely with various Operational teams across the Company, you’ll need the following skills and qualities:

• Adaptability: you’ll handle multiple investigations at the same time while continuing supporting other teams, switching from one  topic to another while talking to different audiences.

• Prioritization: as your position deals with potential high-risk, you’ll need to decide quickly what to handle first, depending on your assessment of exploitability and business impact.

• Curiosity: reacting is good, but understanding contextual environment of an asset, how it is protected, and the potential exploitation paths, is crucial in the job.

• Persistence: in such a large Company, not everything is perfect nor up-to-date, so you’ll often need to dig deep to find the right stakeholders.

Why you'll love the job

• Impactful Work: you’re a key player in keeping Sanofi’s exposure to critical cyber threats at an acceptable level, and you help your teammates better understand how Operational teams work.

• Investigative Thrill: You’ll experience the excitement of diving deep into multiple databases and asset inventories, piecing together clues to uncover critical exploitation scenarios.

• Collaborative Culture: you can’t work alone in your position, so you’ll need to collaborate with various teams, cultures, and mindsets.

• Innovation-Friendly: you’ll help shape how automation and detection evolve in the CVM program.

Challenges to expect

• Complex Asset Ownership: Responsibilities are often shared across teams; you’ll need to map out who does what.

• Cross-Team Coordination: You’ll often need to track down asset owners or negotiate remediation plans.

• High Stakes: Some alerts involve urgent, high-risk vulnerabilities that require fast, accurate decisions.

Why choose us?

• Bring the miracles of science to life alongside a supportive, future-focused team.

• Discover endless opportunities to grow your talent and drive your career, whether it’s through a promotion or lateral move, at home or internationally.

• Enjoy a thoughtful, well-crafted rewards package that recognizes your contribution and amplifies your impact.

• Take good care of yourself and your family, with a wide range of health and wellbeing benefits including high-quality healthcare, prevention and wellness programs and at least 14 weeks’ gender-neutral parental leave.

• Opportunity to work in an international environment, collaborating with diverse business teams and vendors, working in a dynamic team, and fully empowered to propose and implement innovative ideas. 

PursueProgress. Discover Extraordinary.

Progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. You can be one of those people. Chasing change, embracing new ideas and exploring all the opportunities we have to offer. Let’s pursue progress. And let’s discover extraordinary together.

At Sanofi, we provide equal opportunities to all regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or gender identity.

Watch our ALL IN video and check out our Diversity Equity and Inclusion actions at sanofi.com!