Junior Penetration Tester – Apprenticeship

About the role

Join Decathlon Digital’s Cyber Defense team as a Junior Penetration Tester on a work‑study basis. You will work alongside Red and Blue Team experts to strengthen the security of the world’s largest digital sports platform.

Key responsibilities

• Map existing detection rules to the MITRE ATT&CK framework and identify defensive blind spots.
• Execute attack simulations with Atomic Red Team to validate alert generation in EDR and SIEM solutions.
• Support post‑pentest activities by managing the vulnerability lifecycle through remediation and rule creation.
• Develop, customize, and obfuscate offensive tools, experimenting with generative AI for code generation.
• Contribute to technical Playbooks and shadow senior analysts during complex penetration tests.

Required profile

• First‑hand experience through university projects, internships, or CTF platforms such as TryHackMe, Root‑Me, or HackTheBox.
• Pursuing a Master 1 or Master 2 in Cybersecurity.
• Strong analytical mindset with the ability to communicate fluently in French and English.
• Team‑oriented attitude and a passion for knowledge sharing.

Required skills

• MITRE ATT&CK, OWASP Top 10, Atomic Red Team.
• EDR and SIEM concepts.
• Python, PowerShell, Bash scripting.
• AI/LLM prompt engineering.
• Windows and Linux environments, Active Directory.
• Basic cloud knowledge (GCP, AWS) and containerization.

What we offer

• Hands‑on experience in a fast‑growing sports‑tech environment.
• Mentorship from senior security professionals.
• Access to cutting‑edge tools and generative AI technologies.