Want a cybersecurity job in France after your studies? Official European and French data on where demand comes from, eight roles to aim for, how AI changes each one, what they pay and which permits let you stay.
Is there real demand for cybersecurity jobs in France?
Yes. The shortage is measured at EU level, confirmed by employers and visible in French job ads.
The European Commission estimates the EU was short of 299,000 cybersecurity professionals in 2024, 9% more than in 2023, and expects the gap to grow with NIS 2, the Cyber Resilience Act and DORA (page updated 18 August 2026). In ENISA’s NIS Investments 2025 survey of 1,080 professionals, 76% of organisations struggle to attract cyber staff and 71% to retain them; the main barrier (45%) is finding candidates with the required skills.
For France, APEC, the association for executive employment, counted 7,000 job ads requiring cyber expertise for cadre positions in 2021, 90% more than in 2017 (study with the Pôle d’excellence cyber, 7 June 2022). More than half came from digital services firms (ESN), 34% from other services such as engineering, banking and insurance. Île-de-France ranked first, and 22% of cyber ads were open to young graduates.
The threat sustains the demand. Cybermalveillance.gouv.fr, the government’s victim-assistance service, helped more than 500,000 victims in 2025 (+20%), with data-breach requests up 107% and phishing up 70% (report of March 2026).
Why do NIS 2 and the AI Act create cyber jobs?
Two EU texts turn security into a legal duty, and someone has to do the work.
NIS 2 (Directive 2022/2555) covers 18 critical sectors and, as a rule, all medium and large entities in them, from energy and health to managed security services, public administration and space (European Commission, updated 2 July 2026). Companies must address 10 risk-management elements, including incident handling, supply chain security, vulnerability handling and cryptography, and report significant incidents within 24 hours, 72 hours and one month. Maximum fines reach at least €10 million or 2% of worldwide turnover for essential entities. France’s transposition bill passed the Senate in March 2025 and, in late October 2026, still awaited a final vote at the Assemblée nationale. ENISA’s NIS Investments 2024 found that 89% of organisations expect to need more cyber staff to comply.
The AI Act, Article 15, requires high-risk AI systems to be robust and cyber-secure, with measures against data poisoning, model poisoning, adversarial examples and confidentiality attacks. The official timeline, as amended by the Digital Omnibus on AI:
Source: AI Act Service Desk, implementation timeline, read 30 October 2026.
Which cybersecurity jobs can international graduates target?
ENISA’s European Cybersecurity Skills Framework (ECSF) defines 12 role profiles and is the EU key to French job titles. Eight realistic targets:
Monitors SIEM alerts, triages and escalates incidents. Incident detection and response is the skill need EU organisations cite most (38%, ENISA).
AI angle: models flag anomalies and pre-sort alerts; you verify and tune them.
Prove it with: detection rules and an incident write-up.
Protects models, training data and LLM applications against prompt injection, poisoning, adversarial examples and data leaks.
AI angle: the core of the job, pushed by AI Act Article 15.
Prove it with: a red-team report on an LLM app, with fixes.
Designs secure industrial architectures: IT/OT segmentation, identity, IEC 62443. ENISA: 35% need architecture skills, 33% OT security.
AI angle: anomaly detection on industrial traffic, attacks tested on digital twins.
Prove it with: an architecture file justified risk by risk.
Turns NIS 2, GDPR and the AI Act into risk analyses, policies and evidence. GRC was 18% of cyber profiles sought (APEC 2022).
AI angle: AI systems and AI suppliers join the risk register.
Prove it with: a risk analysis and a gap report.
Analyses attackers’ tactics, techniques and procedures to produce intelligence defenders can act on.
AI angle: ENISA saw jailbroken LLMs in use and poisoned hosted models in the AI supply chain.
Prove it with: a campaign report with indicators of compromise.
Leads the response, restores systems, preserves evidence and feeds the NIS 2 incident reports.
AI angle: AI-written phishing and deepfakes change the evidence and the playbooks.
Prove it with: a playbook and a timeline rebuilt from logs.
Secures cloud platforms and access management. ENISA: cloud security 37%, identity and access 34%.
AI angle: model endpoints, keys and data pipelines enter your scope.
Prove it with: a hardened cloud deployment with logging.
Finds and exploits vulnerabilities to test controls. ENISA puts vulnerability exploitation at 21.3% of initial access.
AI angle: tests now include prompt injection against chatbots.
Prove it with: capture-the-flag write-ups and a test report.
Not shown: CISO, Auditor, Educator and Researcher. For AI and data roles outside security, see AI jobs in France for international students and data science jobs in France.
Where does AI change the cybersecurity job?
AI sits in three places at once: the attacker’s toolkit, the defender’s SOC and the systems to protect.
ENISA’s Threat Landscape 2025 (4,875 incidents) calls AI a defining element of the threat: AI-supported phishing reportedly exceeded 80% of observed social engineering by early 2025.
Machine learning spots anomalies, groups related alerts and drafts summaries. Analysts move from repetitive triage to verifying, tuning and explaining.
ENISA notes that AI in companies opens a new attack surface. The AI Act names the attacks: data poisoning, model poisoning, adversarial examples.
High-risk AI rules arrive in 2027 and 2028, and NIS 2 already demands supply chain security. Security and GRC teams document models and suppliers.
| Task | With AI | What to learn |
|---|---|---|
| Alert triage | Model scores and groups alerts; analyst validates | SIEM, machine learning basics |
| Phishing defence | Lures are fluent and personalised | Email security, OSINT |
| Application security | Prompt injection and model abuse join web flaws | LLM security, adversarial ML |
| Compliance | AI systems and AI suppliers come into scope | NIS 2, AI Act, risk analysis |
AI2 summary of typical changes, not survey results.
Which skills lead to which roles?
Pick two or three rows and build proof.
| Skill | Demand signal | Roles it opens |
|---|---|---|
| Incident detection and response | 38% (ENISA 2025) | SOC analyst, incident responder |
| Cloud security | 37% (ENISA 2025) | Cloud security engineer |
| Security architecture | 35% (ENISA 2025) | Security or OT architect |
| Identity and access management | 34% (ENISA 2025) | IAM engineer, architect |
| OT and ICS security | 33% (ENISA 2025) | OT security architect |
| Security of AI systems, LLMs | AI Act Article 15 | AI security engineer |
| Machine learning for detection | AI-supported attacks (ENISA) | Detection engineer |
| Risk analysis and compliance | NIS 2 obligations | GRC and NIS 2 consultant |
| Threat intelligence, OSINT | ECSF profile | Threat intelligence analyst |
Percentages: share of EU organisations naming each skill as a need, ENISA NIS Investments 2025.
How much do cybersecurity jobs pay in France?
We quote primary data only. In APEC’s survey of pay in 111 job families (2025 edition, 26,000 private-sector cadres), the IT security family, which covers SOC analysts, IT security engineers, data protection officers and security managers, has a median annual gross pay of €60,000, fixed plus variable. 80% earn between €43,000 and €99,000, against a €55,000 median for all cadres. These figures mix all experience levels; they are a market range, not a first-job offer. The legal pay floors for permits are in the next table.
Can international graduates work in France after their studies?
Yes. French law sets a clear path from student permit to work permit.
During your studies, a student permit allows up to 964 hours of work a year, 60% of legal working time; apprenticeship and professionalisation contracts can exceed that limit under conditions (Service-Public F2713). The student visa requires at least €877.50 a month in resources (F2231); steps are in our student visa guidance.
| Route | What it gives you | Key conditions |
|---|---|---|
| Job-search or business-creation permit | 1 year to find a job or create a company; not renewable | Diploma at least equivalent to a master’s obtained in France in the last 12 months; €150; apply in the 2 months before your student permit expires; job paid more than €2,800.53 a month |
| Change of status to employee | Residence permit as an employee | No labour market test if the job relates to your training and pays at least €2,800.53 a month, or is on the shortage list |
| Talent, qualified employee | Card for the contract length, up to 4 years | Master’s-equivalent diploma obtained in France; contract over 3 months; at least €39,582 a year |
| Talent, EU Blue Card | Up to 4 years, renewable | 3 years of higher education or 5 years of experience; contract of 6 months or more; at least €59,373 a year |
Sources: Service-Public F17319, F2229, F16922 (verified 1 June 2026); Welcome to France, Talent EU Blue Card. Read 30 October 2026.
AI2’s programme page describes the same path for its MSc graduates: a 12-month job-search permit, then an employee, Talent or EU Blue Card permit. Details are in working in France after graduation.
How do you get from student to first cyber job?
Read ten real ads for each and list the tools and standards that recur.
SOC and SIEM practice, risk analysis, secure architecture, security of AI systems and a long placement.
Show €877.50 a month and start Campus France steps once admitted.
Lab write-ups, a detection project, hackathons and validated competency blocks.
Apply months ahead and use your school’s careers coaching.
File in the 2 months before your student permit expires, ideally with an offer of €2,800.53 a month or more.
Indian applicants: see master’s in cybersecurity in France for Indian students, and compare programmes in cybersecurity master’s in France taught in English.
Where does AI2’s MSc Applied AI & Cybersecurity fit?
AI2, the Applied Institute of Artificial Intelligence, teaches its MSc Applied AI & Cybersecurity 100% in English (B2 required, no French needed) at the Hub Nikola Tesla in Écouen, 22 minutes from Paris Gare du Nord. The final year awards the AI2 diploma and prepares the professional title RNCP39978 « Architecte des systèmes d’information dans les processus industriels », level 7 (master’s level, EQF 7), recognised by the French State and certified by DATAKOO, AI2’s parent company.
Year 1 (500 hours): shared applied AI foundation. Year 2 (500 hours): cybersecurity specialisation. Then a 6-month internship and final project. After a three-year bachelor’s.
1,000 hours in 12 months: the 500-hour Year 2 on campus, 280 hours of online platform modules (Cisco Networking Academy, DataCamp) and a 220-hour company project, then the 6-month internship and final project before a jury. After a related four- or five-year degree.
The four official blocks include security competencies: security architecture, risk analysis, security supervision and simulation of security incidents. At AI2, the courses and the block assessments use cybersecurity cases, and each block is defended before a jury.
| Official block (RNCP39978) | Security content in the official record | How AI2 teaches it |
|---|---|---|
| BC01 · Analyse des besoins systémiques pour les systèmes d’information industriels Systemic needs analysis for industrial information systems | Compliance and security requirements; risks of new solutions and mitigation | Cyber-risk analysis: EBIOS Risk Manager, MITRE ATT&CK for ICS, NIS 2, GDPR, IEC 62443 |
| BC02 · Conception de l’architecture des systèmes d’information industriels Design of industrial information system architecture | Security architecture; risk analysis; security mechanisms and policies | Zero trust, IT/OT segmentation, Purdue model, IAM, PKI, TLS 1.3, mTLS |
| BC03 · Prototypage et simulation des systèmes d’information industriels Prototyping and simulation of industrial information systems | Security supervision and control; simulation of security incidents | Cyber range, attacks on an industrial digital twin, detection pipeline |
| BC04 · Amélioration des systèmes d’information dans les processus industriels par l’innovation Data et IA Improving industrial information systems through data and AI innovation | Innovation for performance and security; ethics of AI | Machine learning intrusion detection, AI-assisted incident response |
Sources: France Compétences RNCP39978 record; AI2 programme page. 56 hours per block in Year 2.
AI2’s 168-hour cyber track complements the blocks: Applied Cryptography; SOC, SIEM & Incident Response; Security of AI Systems (adversarial machine learning, LLM security, prompt injection, poisoning); and Threat Intelligence. Career directions named: AI security engineer, detection and SOC analyst, IS and OT security architect, NIS 2 compliance consultant. In 2025, five AI2 students took part in the CND Hackathon of the French Ministry of the Armed Forces.
| Format | Tuition 2027 | After AI2 scholarship |
|---|---|---|
| MSc Year 1 | €12,500 | from €10,500 |
| MSc Year 2, cybersecurity | €13,000 | Stated in your admission letter |
| 18-month direct entry | €13,000 | from €11,300 |
Source: AI2 tuition fees 2027. Conditional scholarship, first year of enrolment, confirmed in the admission letter.
Intakes: February, May and September 2027. For February, the priority deadline is 30 November 2026, with enrolment and deposit by 15 December 2026. The 11-month Fast-Track is offered on the data science MSc; the cyber MSc uses the two formats above. Applicants are assessed automatically for an AI2 scholarship. See the cybersecurity MSc curriculum.
Frequently asked questions
Can international students get cybersecurity jobs in France?
Yes. The EU was short of 299,000 cyber professionals in 2024 (European Commission), and 76% of organisations surveyed by ENISA find it hard to attract cyber talent. Graduates with a master’s-level diploma from France can stay one year to job-hunt, then switch to an employee, Talent or EU Blue Card permit.
Which cybersecurity roles suit a new graduate in France?
Start from ENISA’s ECSF profiles: Cyber Incident Responder (SOC analyst), Cybersecurity Implementer (security engineer), Compliance Officer (GRC or NIS 2 consultant) and Threat Intelligence Specialist. Incident detection and response is the skill need EU organisations cite most (38%).
How is AI changing cybersecurity jobs?
Attackers use AI: ENISA reports that more than 80% of observed social engineering activity was AI-supported by early 2025. Defenders use machine learning for detection and triage. And AI systems must be secured: the AI Act requires high-risk AI to resist data poisoning, model poisoning and adversarial examples.
How much does a cybersecurity job pay in France?
APEC’s 2025 edition puts the median annual gross pay of cadres in IT security jobs at €60,000, with 80% between €43,000 and €99,000. The figures cover all experience levels, not only first jobs.
Do I need to speak French to work in cybersecurity in France?
It depends on the employer, so check the language line in each ad. You can study cybersecurity in English at AI2 with B2 English and no French, and optional French classes widen the ads you can answer.
Can I stay in France after my master’s to look for a cyber job?
Yes, with the job-search permit: 1 year, not renewable, for a diploma at least equivalent to a master’s obtained in France in the last 12 months. It costs €150 and you apply in the 2 months before your student permit expires.
Does AI2 offer a cybersecurity master’s in English?
Yes. The MSc Applied AI & Cybersecurity is taught 100% in English in Écouen, near Paris, in 2 years or in 18 months through direct entry into Year 2; both routes include 1,000 hours of study before the six-month internship. It prepares the RNCP39978 level 7 title, with intakes in February, May and September 2027.
How much does AI2’s MSc Applied AI & Cybersecurity cost?
Year 1 is €12,500, from €10,500 after a conditional scholarship. Year 2 and the 18-month direct entry are €13,000, from €11,300. The February 2027 priority deadline is 30 November 2026.
Sources consulted on 30 October 2026: European Commission: Cyber Skills Academy (updated 18 August 2026) · ENISA: NIS Investments 2025 · ENISA: NIS Investments 2024 · ENISA: Threat Landscape 2025 (version 1.3, September 2026) · ENISA: European Cybersecurity Skills Framework · ENISA: ECSF Role Profiles (September 2022) · ENISA: roles and skills for NIS2 entities · European Commission: NIS 2 Directive (updated 2 July 2026) · European Commission: NIS 2 FAQs · Assemblée nationale: NIS 2 transposition bill · AI Act Service Desk: Article 15 · AI Act Service Desk: implementation timeline · Cybermalveillance.gouv.fr: 2025 activity report (March 2026) · APEC: cybersecurity study (7 June 2022) · APEC: cadre pay, 111 job families (2025) · APEC: barometer Q1 2026 · Service-Public F17319 (verified 1 June 2026) · Service-Public F2229 (verified 1 June 2026) · Service-Public F16922 (verified 1 June 2026) · Service-Public F2713 · Service-Public F2231 (verified 1 August 2026) · Welcome to France: Talent, EU Blue Card · France Compétences: RNCP39978 · AI2: MSc Applied AI & Cybersecurity · AI2: tuition fees 2027
AI2’s admissions team reviews your file, holds an online interview and confirms your route, tuition and scholarship in your admission letter. Priority deadline for February 2027: 30 November 2026.
