
The essentials from “The Lift”: building your career at Orange Cyberdefense
In seven years, Julien Champion has built his career at Orange Cyberdefense by gaining experience across a wide range of assignments and certifications after first joining as an intern. Starting as a Junior Cybersecurity Consultant, he quickly progressed to Senior Consultant before becoming a Team Leader and taking responsibility for his own team. He has developed his expertise across areas ranging from crisis management to international projects, while also working on interpersonal skills such as public speaking. His career path has been supported from the outset by his manager, Marc Tolub, who recognised his potential early on.
At Orange Cyberdefense, continuously developing soft and hard skills is a driver of growth.
Julien Champion, Team Leader, Orange Cyberdefense.
Julien Champion, Team Leader: “For my final engineering-school project, I applied for an internship at Orange Cyberdefense. I had interviewed with several other companies, but my interview with Marc convinced me immediately: he did not oversell the company or the role. He was very genuine, explaining what my role would involve and what progression opportunities I could have. That honesty won my trust.”
Marc Tolub, Senior Manager, Consulting and Audit: “I agree with Julien about the importance of trust. When I recruited him seven years ago, I was building my consulting and audit team and we needed an intern to work on crisis management. At the time, that expertise barely existed. I wanted to develop an offering for public- and private-sector organisations to help them respond to and manage cyberattacks. Of course, I was looking for technical expertise, but also for someone who could handle stressful situations. That is exactly Julien’s profile.”
Julien: “When I joined, I already had expertise in networks, technical penetration-testing skills and a specialisation in project management. I wanted to develop skills in organisational security and cybersecurity governance. Above all, I was aware of my weaknesses: when I finished my studies, I was shy and nervous about speaking to people or even sending them a message. I knew I needed to work on that. So I put a lot of effort into social interaction and client relationships. From my first assignments with other colleagues, I saw what a team of professionals really looks like. I had to change my mindset, moving from a student who was still learning to an expert who understood his subject when speaking to clients who did not have the same technical knowledge. Coming from a very engineering-focused background, I was surprised by the variety of career paths in the team: some colleagues came from political science, others from crisis management or law. That multidisciplinary mix is a real strength.”
Marc: “I deliberately want my teams to include people from different backgrounds. We work with companies facing a wide variety of issues, so we may be speaking to a CISO, CEO, HR Director or CFO. We take a holistic approach to client issues because a cyber crisis affects the whole organisation. Today, Julien came from engineering school but can discuss topics related to communications or human resources. His expertise has developed through working with the team and the different issues he has encountered.”
Julien: “Without hesitation, I would say an international client in the luxury sector. We sold a cyber crisis management exercise programme designed to simulate an attack and train teams. We worked with ten entities around the world, so we had to take different cultures into account, meet the local teams and understand each specific context. One important detail was that we came in after a provider whose work the previous year had been very poorly received. We could not afford to get it wrong because the entire programme could have been called into question. We proved that they could trust us. Today, those entities contact us directly.”
Marc: “Julien is being modest: he led the entire project! It reflects his progression in both soft skills and expertise. You can measure that career progression through client satisfaction. When a consultant is able to represent the company on strategic, ambitious projects for major accounts, it shows a high level of professional maturity.”
Julien: “After my internship, I was hired as a Junior Consultant for two years. I then spent the next two years as a Consultant before becoming a Senior Consultant in 2023. In 2026, I became a Team Leader, with management responsibilities. Moving into management was one of my professional development goals. Both of my parents are managers, so I had an idea of what the role involved and it interested me. When the opportunity came up, Marc supported my application. Moving into management changed my position: I am no longer simply a colleague. You have to establish your authority, adapt your behaviour, show leadership and put certain guidelines in place. It is my responsibility to be there for my team and make sure everyone feels supported.”
Julien: “I have always set myself certification goals every year, not necessarily to learn something new, but to validate expertise I had already gained. That is why I took the ISO 27001 cybersecurity certification. Theory is important, but you learn most in the field. Certifications provide proof. My most recent one is the CISSP, Certified Information Systems Security Professional, an internationally recognised certification with a reputation for being difficult. I earned it after five years of experience. In every area, I like to build up specific skills, a bit like levelling up in a video game! For example, to develop my skills, I took soft skills training to improve my public speaking. Today, I can give presentations and speak at conferences while managing my stress, something I would have been unable to do a few years ago.”
Julien: “He played a key role! Marc trusted me and has always been there to steer and guide me, while still giving me the autonomy to go through my own experiences and difficulties. He managed to push me beyond what I thought I could do, towards my ambitions, while giving me the tools I needed.”
Marc: “To add to that, I supported Julien in two ways. The first was the more conventional route: directing him towards training and programmes that could accelerate his progression towards greater expertise or management responsibilities. The second was to put Julien straight into the deep end. Nothing consolidates professional development and skills like real-world experience. Julien wanted to move into international project management. As soon as an opportunity came up, I encouraged him to take it, not on his own, of course. Training gives you a foundation, but nothing replaces dealing with real situations. Whether formally during annual reviews or informally over coffee, Julien has always told me about his career ambitions. That allowed me to help him build a trajectory. It is easier to support someone who has a clear idea of the career path they want to build.”
You try to break through a barrier and hack the system, says Julien.
Marc: “His calmness. Julien has a very composed personality. He knows how to step back and gain perspective so he can reassure clients facing extraordinary, anxiety-inducing situations and significant pressure. Keeping a cool head and reassuring people are important interpersonal qualities when working with clients.”
Julien: “The primary role of a cybersecurity consultant is to advise clients on how they can improve. Crisis management is a specific discipline. The real pressure often comes from meeting clients: one day I might be sitting opposite an executive from a major CAC 40 company, and the next I might be working with the head of an SME. Expectations are different. You have to adapt the way you present yourself, answer questions, meet deadlines and still deliver high-quality work. The pressure comes more from the consulting role itself than from the crisis.”
Julien: “You need to have a clear idea of your ambitions and what you want. At Orange Cyberdefense, there is flexibility and there are career opportunities for people who want to move into management, technical expertise or consulting. The company may not be able to meet every ambition 100%, but every employee has plenty of options available to them. My advice is to ask yourself what you want to do, think ahead and avoid seeing a career path as a straight line.”
Marc: “The Orange employer brand is a strength. It gives people considerable room to move and progress. When someone has a good idea, we can connect that idea with the right people and put resources behind it. There is a strong entrepreneurial side to Orange Cyberdefense. In the consulting and audit teams, we do not work in silos. You can join with expertise in one area and explore others across disciplines. Depending on their interests, someone joining us early in their career can specialise in crisis management, Governance, Risk and Compliance, GRC, or other areas.”
Julien: “Boldness is one of Orange Cyberdefense’s core values, and it is probably the value that resonates most strongly with our company culture. You should not hesitate to try, take risks, experiment, fail... and improve. Penetration testing is a good example: you try to break through a barrier and hack the system. At first it does not work, so you rethink the way you are looking at the problem, talk it through with other people and eventually find a solution that is very different from your first approach.”
Marc: “That mindset originally comes from finding innovative strategies for getting into an information system. To make progress, you need imagination and strategy. It takes determination, perseverance and proactivity. That is the ‘Hacking Spirit’.”
Marc: “For our consulting roles, it is a evolution. AI is changing the landscape, but that does not mean we should be afraid of it. By automating the least interesting tasks, we can focus on higher-value activities. It is up to us as managers to support younger consultants as they develop and integrate these new ways of working.”
Julien: “Take meeting minutes as an example. Now it takes 15 minutes to review them, whereas writing them used to take two hours. In consulting, we sell intellectual services. That is very different from highly technical roles such as penetration testing, where AI will explore vulnerabilities and interact with new systems. We use it to save time, provide a starting point for our thinking, identify blind spots and challenge ourselves. It helps us improve the quality of our work.”
Explore the other episodes of our series "The Lift: the floor is yours" at Orange Cyberdefense, by clicking below.