Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 34 days ago

Information Security Apprentice

Didomi6 open roles

Where
Paris,France
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security ApprenticeDidomi · Paris,France

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Didomi's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Didomi postings stay open a median of 23 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 34 days ago

Didomi median: 23 days open

The posting

Didomi helps organizations collect, store, and leverage user choices across multiple channels, increasing precision in marketing and advertising operations and building trust through transparent data practices.

Through a comprehensive software platform and premium support services, Didomi enables large corporations to optimize the collection and activation of user choice data, monitor vendor and tracker activity, and reduce compliance risk under global privacy regulations.

Following the 2025 acquisitions of Addingwell and Sourcepoint, Didomi has strengthened its end-to-end capabilities across consent, preferences, and data activation, bringing together server-side tagging and privacy technology to deliver experiences that improve performance, trust, and loyalty.

Active in 35 countries, Didomi supports over 2,000 clients across various sectors, including some of the world's largest corporations, in building revenue-driving operations based on reliable and robust user choice data.

For more information, please visit www.didomi.io

About the apprenticeship

We are looking for an Information Security Analyst apprentice to join our Security & IT team. This is a work-study position (contrat d'apprentissage) for a student in cybersecurity, information systems, or a related field, who wants to learn how security actually works inside a fast-growing B2B SaaS company.

You will not be on the sidelines. Didomi is a small security team with a large scope: three business units (Didomi, Sourcepoint, and Addingwell) now covered by a single ISO 27001 management system, a HIPAA compliance program being implemented, and security operations across cloud, endpoints, identity, and SaaS. You will take real ownership of recurring activities, with guidance, and grow into broader topics as you progress.

The role covers information security in the broad sense: security operations, cloud and identity security, vulnerability management, awareness, and compliance. Compliance is part of the job, not the whole job.

You will report to the Security & IT Manager, who will also be your tutor (maître d'apprentissage) throughout the contract.

What you will learn and do

Security operations

  • Take part in the recurring activities on the security calendar: vulnerability scanning campaigns, quarterly access reviews, business continuity tests, and policy review cycles.
  • Triage security and vulnerability findings from AWS (GuardDuty, Inspector, Security Hub), CrowdStrike Falcon, and other sources, learn to prioritize them, and follow remediation through to closure with the engineering teams.
  • Help monitor and respond to security alerts and incidents, including endpoint detections in CrowdStrike Falcon, and contribute to incident documentation and post-incident reviews.
  • Support endpoint security through our device management platform (JAMF) and our EDR (CrowdStrike Falcon), and help keep device baselines healthy.

Cloud, identity, and access

  • Learn how identity and access management works at Didomi (Google Workspace, SSO, MFA) and help keep it tight.
  • Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications) and surface findings to the team.
  • Help harden internal workflows around access, data handling, and SaaS usage.

ISO 27001, HIPAA, and audit readiness

  • Help maintain our ISO 27001 management system: keep controls documented and evidenced, and follow up on corrective actions and improvement initiatives.
  • Contribute to internal audits, surveillance audits, and recertification cycles, including the unified audit covering all three business units.
  • Support the implementation of HIPAA controls and learn how requirements map across frameworks.

Cross-functional security support

  • Contribute to security reviews of new tools, vendors, and SaaS applications before adoption.
  • Help answer security questionnaires, RFPs, and customer due diligence requests.
  • Contribute to security awareness across the company (training content, phishing simulations, internal communication).
  • Get exposure to broader initiatives such as AI governance, SaaS governance, and integration of acquired entities into the ISO scope.

What we are looking for

Required

  • Enrolled in a degree program (Bac+3 to Bac+5, e.g. Licence pro, Master, or engineering school) in cybersecurity, information systems, computer science, or a related field, and eligible for an apprenticeship contract in France.
  • Foundational understanding of information security concepts: networks, operating systems, identity and access, common threats and vulnerabilities.
  • Curiosity and a hands-on mindset: you like to understand how things work, and you are comfortable learning new tools quickly.
  • Interest in automation and AI tooling to speed up recurring work. You do not need to have built anything yet, but you should want to.
  • Rigor and reliability: recurring security work depends on things being done on time and documented properly.
  • Professional French and strong written and spoken English. You will work with French and international colleagues, and most documentation is in English.

Nice to have

  • First exposure to a cloud provider (AWS in particular), Linux, or scripting (Python, Bash).
  • Awareness of ISO 27001, GDPR, or other security and privacy frameworks.
  • A personal project, CTF participation, home lab, or certification (e.g. CompTIA Security+, ISC2 CC, AWS Cloud Practitioner) that shows your interest in the field.

Tools you will work with

  • Compliance and GRC: Vanta
  • Cloud and security monitoring: AWS, AWS GuardDuty, AWS Inspector, AWS Security Hub
  • Endpoint detection and response: CrowdStrike Falcon
  • Identity and access: Google Workspace, SSO and MFA providers
  • Endpoint and device management: JAMF
  • Code and engineering: GitLab, GitHub
  • Collaboration and documentation: Slack, Notion, Google Workspace
  • SaaS governance and vendor review: internal review workflows and questionnaire tooling

Why join

  • A rare chance to see the full breadth of a security function, from cloud alerts to certification audits, rather than one narrow slice.
  • Direct mentoring from the Security & IT Manager and real responsibility from the first months.
  • A team that values pragmatic, working controls and actively uses automation and AI to remove manual work.
  • An international, privacy-first company at the heart of the consent and data activation space.

Recruitment Process

HR Interview with our Talent Acquisition Expert (15 minutes)

Hiring manager interview with our IT & Security Manager (30 minutes)

Technical exercise to complete

Final interview with our CTO (Optional)

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Didomi's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Didomi's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Didomi's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.