Cyber crisis and incident response expert
- €60–72k
- 5+ years of experience
- Paris 13th · mostly remote
- Permanent contract (CDI)
- Posted on 8 November 2026
Your application is sent from your own mail client: blooo.io stores nothing. It is only used for this recruitment and kept only while your application stands (2 years at most), then deleted, or sooner on request. Privacy policy.
The role
You join the Cybersecurity Governance practice with at least 5 years of experience. You lead the crisis module of the Trusted Organisation offer: preparing our clients for a cyber crisis and for incident response.
Responsibilities
- Design cyber crisis governance: roles, crisis unit, procedures, crisis kit.
- Prepare incident response: procedures, escalation paths, coordination with service providers.
- Design and run crisis exercises, then lead lessons-learned reviews.
- Define a training strategy and train teams and executives.
Profile
- At least 5 years of experience in information systems security, including at least 3 years in crisis preparedness or incident response.
- At least one real cyber crisis experience.
- Knowledge of ANSSI crisis management guidance and of NIS2 and DORA incident requirements.
- Calm, well organised, and at ease with executives.
- Valued certifications: ISO 22301 Lead Implementer, GCIH.
- Eligibility for French national defence security clearance is a plus.
- Fluent French and professional English, written and spoken.
Conditions
- Permanent contract (CDI), fixed gross annual salary: €60,000 to €72,000, depending on experience; meal vouchers at €14.52 per day
- A performance-based bonus on top of the fixed salary
- Mostly remote, with presence in Paris for key meetings and team events, and at clients’ premises depending on the engagement
- Offices at 198 Avenue de France, 75013 Paris (metro line 6, Quai de la Gare, close to metro lines 5 and 14 and RER C)
- SYNTEC collective agreement, health and provident insurance
- Support for training and certifications
About Blooo
Blooo is a French cybersecurity firm certified ISO/IEC 27001:2022, organised in two practices, Cybersecurity Governance and Cybersecurity Architecture. Our method, Orient, Organise, Orchestrate, replaces declarations with proof: we reconnect governance and risk decisions with the technical reality of our clients, critical entities and organisations subject to NIS2 or DORA.