Almond

Security Engineer

• Develop hardware security analysis methodologies and techniques based on offensive security techniques
• Reverse-engineer PCBs or firmware
• Exploit debug interfaces (JTAG, UART, SWD)
• Extract and analyze flash memory
• Bypass anti-tamper mechanisms
• Identify PCB components
• Perform soldering and decapping operations
• Analyze communication protocols (JTAG, UART, SPI, etc.)
• Update internal methodologies and knowledge
• Develop dedicated tools

Hardware Security Evaluation Intern

Artificial Intelligence

• Learn and apply the security approach used in projects
• Analyze existing processes and tools: security requirements definition, project risk assessment, security assurance plan, security acceptance testing, and accreditation
• Identify control points for each project phase and how the process is implemented at a client organization
• Test the templates against real-world AI projects and document their limitations
• Design a project qualification framework covering use cases, data, in-house or third-party model, degree of autonomy, and exposure
• Develop a security requirements template combining CIA criteria and AI-specific criteria
• Build the associated security controls catalog: data and model protection, input and output filtering, agent guardrails, logging, human oversight, and reversibility
• Define acceptance criteria and corresponding security acceptance tests
• Test the toolkit on an internal project or client engagement and refine it
• Align the toolkit with AI security governance activities and accreditation processes
• Prepare materials for implementing the process at client organizations and train consultants

Internship – Security of Artificial Intelligence Projects and Associated Systems

Compliance

• Analyze the alignment between ISO 27001 and ISO 42001: common requirements, differences, and the reuse of an existing ISMS to support an AI management system
• Formalize the integration of CIA criteria with AI-specific criteria: bias, robustness, explainability, drift, and human oversight
• Study the relationship between the technical constraints surrounding an agent and the requirements and measures established by governance
• Monitor regulatory and standards developments, particularly the AI Act, ISO 42001, and the NIST AI RMF, and produce impact assessments
• Leverage projects carried out in the last quarter of 2026: field feedback, observed gaps, and recurring client questions
• Enhance the unified framework and multi-framework gap analysis grids
• Adapt standard GRC templates to AI systems: risk analysis, security policy, ongoing monitoring, and authorization
• Build a maturity-level roadmap model, including typical workstreams, milestones, and indicative effort
• Define a scalable operating model and its associated performance indicators
• Produce internal training materials and contribute to the development of service offerings and presales activities
• Collaborate with clients and Almond teams

Internship – AI Security Governance and GRC

• Study the components of an AI platform: models, prompts, agents, document repositories, APIs, and connectors
• Identify data flows, the identities used, and trust boundaries
• Develop a threat landscape based on reference publications
• Create a threat model for a pilot architecture and prioritize the scenarios to be addressed
• Study the security of access, technical accounts, secrets, and permissions granted to agents
• Define protections for data and communications, from document ingestion through to generated responses and actions
• Identify isolation, hardening, logging, and outbound traffic control measures
• Compare the controls available in the existing environment with the capabilities of specialized solutions
• Deploy a representative AI pipeline within a controlled technical scope
• Configure protection measures and develop validation scenarios in a laboratory environment
• Assess the effectiveness, limitations, and impact of protections on legitimate use cases and performance
• Produce a reusable reference architecture, control catalog, and security hardening guide

Internship – AI Infrastructure Protection and Security

• Study technical reports from CERTs and security vendors to identify current attack techniques
• Map attack actions to the Cyber Kill Chain and MITRE ATT&CK®
• Design and develop scripts or programs for offensive operations
• Leverage penetration testing tools or develop custom payloads
• Assemble attacks in the M&NTIS emulation engine to create a complete scenario
• Account for evasion requirements when facing EDRs, SIEMs, and network sensors
• Execute scenarios in virtual test environments
• Analyze and document PCAP files and system logs in ECS format
• Ensure the relevance of metadata produced for SOC/CERT teams
• Collaborate with an engineer from the M&NTIS team, clients, and Almond teams

R&D Engineer, Offensive Security, Advanced Attack Emulation, Red Team

Chief of Staff

• Support the Operations leadership team in managing, structuring, and executing its activities
• Contribute strategically to the Operations roadmap
• Provide day-to-day operational support to the COO and Director of Services
• Monitor and enhance the quality of the roadmap through structuring, prioritization, and performance indicators
• Lead selected cross-functional initiatives related to organization, processes, tools, and delivery
• Prepare, scope, present, and follow up on workshop action items
• Produce management and executive summary materials for leadership
• Establish, structure, and facilitate Operations governance meetings
• Support the Delivery team in organizing and monitoring project reviews
• Assist staffing teams in identifying solutions aligned with operational needs
• Contribute to the continuous improvement of management methods, rituals, and tools

Chief of Staff, Operations

Network Engineer

• Resolve production incidents
• Implement changes and upgrades to systems, including the installation and configuration of new firewalls
• Help ensure the smooth operation of client platforms
• Write technical documentation
• Contribute to the optimization of production systems
• Work within the IT Operations production team under the supervision of an experienced engineer
• Manage complex technical platforms for approximately 100 clients across client sites, private cloud, Microsoft Azure, and AWS

Internship – Network & Systems Engineer

• Develop an overview of the Cyber Resilience Act (CRA) and its implementing regulations
• Analyze the CRA service catalog and identify tooling gaps and tasks to be industrialized
• Map interfaces with the CESTI and PSIRT and VOC services
• Document product vulnerability and incident management processes, including RACI matrices and timelines
• Produce templates for security advisories, notifications, tracking registers, support matrices, and end-of-life matrices
• Develop a product risk analysis toolkit compliant with EBIOS RM and IEC 62443
• Build self-assessment checklists for each requirement
• Develop tools to support the assessment file reviewed with a notified body
• Test the tooling on a real-world engagement
• Present and hand over the tooling to GRC consultants

Internship – Strengthening GRC Tooling for Cyber Resilience Act Compliance

Android Engineer

• Conduct a state-of-the-art review of penetration testing techniques for Android and iOS platforms (OWASP MASVS / MASTG)
• Further develop expertise in static analysis through the research, testing, and evaluation of automated and manual methodologies and tools
• Perform reverse engineering, decompilation, code inspection, and secret detection
• Develop proof-of-concept implementations to test dynamic attack techniques and static analysis methods
• Develop internal tools to structure and automate part of the mobile security assessment process
• Expand the internal knowledge base with technical documentation and methodology guides
• Present findings and lead a knowledge-sharing session
• Assist with security assessment engagements, including penetration tests, code audits, and configuration audits

Cybersecurity Intern – Research and Development, Mobile Application Security (Android, iOS)

Pre-sales Engineer

• Develop applications using Power Apps
• Automate processes using Power Automate
• Design Power BI dashboards
• Leverage data from Microsoft 365, SharePoint, and Dataverse
• Improve business performance management tools
• Contribute to the creation and evolution of cybersecurity offerings
• Structure templates for proposals, deliverables, and cost estimates
• Produce concise presentation materials
• Contribute to monitoring sales activity and improving the win rate
• Participate in the continuous improvement of the team’s methods and tools
• Identify new use cases for generative AI
• Develop assistants and tools to support pre-sales activities
• Leverage AI to improve development and business processes
• Conduct technology monitoring and propose innovations

Digital Transformation Pre-Sales Engineer

• Manage the full sales cycle for cybersecurity offerings, from prospecting through to commercial proposal
• Develop initiatives to identify new prospects and expand Almond’s client portfolio
• Conduct commercial market intelligence to identify new client needs
• Develop complex commercial proposals, including defining objectives, approach, and deliverables
• Build relationships with and support newly acquired clients
• Promote and develop Almond’s offerings in line with client needs and IT trends
• Participate in networking events to raise awareness of the firm
• Travel to client sites across the Grand Est region

Cybersecurity Sales Manager

Consultant

• Extend the operating hours of selected Almond CWATCH SOC/CERT services
• Analyze the Canadian market in relation to Almond CWATCH SOC/CERT offerings
• Extend the operating hours of SOC attack detection and threat intelligence services toward a 24/7 follow-the-sun analyst coverage model
• Perform operational and security maintenance activities for SOC infrastructure
• Study local digital forensics investigation procedures and applicable regulations
• Establish relationships with local CERTs
• Analyze the Canadian market and define the offerings to be deployed locally
• Participate in project activities in partnership with the French teams
• Support various service models: managed SOC, hybrid SOC with an on-site local team at client locations, and an internal SOC/CERT reinforcement team

SOC/CERT Consultant

• Contribute to the continuous improvement of detection capabilities through Almond’s SOC use case factory
• Handle alerts in SIRP platforms, qualify incidents, manage notifications, and provide response recommendations
• Monitor incident response activities by coordinating stakeholders
• Develop technical stacks and configurations to automate operations and address emerging threats
• Contribute to log collection and management
• Develop automated responses using the APIs, orchestration tools, and playbooks of security solutions
• Collect, process, create, and share cyber threat intelligence
• Conduct threat hunting activities
• Contribute to the identification, assessment, and management of vulnerabilities
• Lead, produce, and analyze activity and performance metrics
• Assess risk and threat coverage
• Manage projects involving the deployment and operational maintenance of local SOC enclaves, data lakes, and SIEM platforms
• Perform incident response activities, including investigations, digital forensics, reverse engineering, compromise assessments, containment, eradication, recovery, and crisis management

SOC Consultant

• Handle alerts raised by technical stacks in SIRP platforms
• Qualify incidents, issue notifications, provide remediation recommendations, and coordinate stakeholders throughout the response process
• Enhance technical stacks and configurations to automate operations and optimize service efficiency
• Contribute to log collection and management
• Develop automated response capabilities using APIs, orchestrators, and security-solution playbooks
• Collect, process, create, and share cyber threat intelligence
• Conduct threat-hunting activities
• Contribute to the identification, assessment, and management of vulnerabilities
• Lead, produce, and analyze operational and performance indicators, and assess risk and threat coverage
• Manage projects involving the deployment of local SOC environments, data lakes/SIEM platforms, and ensure their operational maintenance
• Perform incident-response activities, including investigations, digital forensics, reverse engineering, compromise assessments, containment, eradication, recovery, and crisis management
• Collaborate with a 40-consultant SOC/CERT team and deliver services across various client service models

Project Manager

• Help manage the customer portfolio and serve as the primary point of contact
• Support customers in using Security Rating® by advising and training them and responding to their needs and expectations
• Provide initial responses to incoming customer inquiries
• Build customer loyalty and monitor customer satisfaction
• Record customer follow-up activities in HubSpot
• Contribute to automating customer interactions and structuring the department

Hardware Security Evaluation Intern

Internship – Security of Artificial Intelligence Projects and Associated Systems

Internship – AI Security Governance and GRC

Internship – AI Infrastructure Protection and Security

R&D Engineer, Offensive Security, Advanced Attack Emulation, Red Team

Chief of Staff, Operations

Internship – Network & Systems Engineer

Internship – Strengthening GRC Tooling for Cyber Resilience Act Compliance

Cybersecurity Intern – Research and Development, Mobile Application Security (Android, iOS)

Digital Transformation Pre-Sales Engineer

Cybersecurity Sales Manager

SOC/CERT Consultant

SOC Consultant

SOC Consultant

Customer Project Manager, Cybersecurity