To set the context, I am now in my 5th year of university (France). I have had a fairly lot of internships, projects and side projects that made me think that I already am a senior developer in the fields I usually work with.
Moreover, I have been teaching Information Security in said university from my 2nd to 4th year (which I took abroad to obtain a 2nd degree in the UK). Doing such, I was obviously not allowed to study those modules as I was pretty much involved in their writings and evaluation.
During my year abroad, I started a micro-company of my own to keep working alongside university, providing low-budget pentests (as I never had any formal teaching or certification in this field, all learnt by myself).
My profile goes as : Security analyst / pentester / developer (back-end arch, not front-end)
To conclude my 5th year, I had to get another internship. I went for a permanent position instead.
So back in November, I have been hired in a company (FR) that designs websites and softwares for clients. Nothing big here.
During interviews, HR recruited me for said work, (mostly) front-end projects with clients. However, the IT guy that got in touch with me (and now my manager) made it clear that he wanted me because of my security/hacking skills and that we'd work side-by-side.
My manager has a heavy development background but has become more of a teacher / consultant for our collaborators.
The first project was some Java architecture (already in production) with huge security flaws, which I fixed pretty quickly and got un-directly thanked (by mail) by the company's CEO (Big guy, never met him yet).
Once this project was done (or at least my part of it), I asked my manager for the next step and he told me to write a Node arch that could be deployed easily. I have been working on it for weeks to the point that I am now adding unnecessary features. Meanwhile, I had to dodge HR that wanted me to go work for some clients (Angular, front-end, ...). I dodged such projects because I don't feel that it's the reason I've been recruited.
Now the interesting part : My manager asked me to join him in his consulting task, I will have to dispense sessions teaching Security Basics to our collaborators all around the country. Except from my students (which some were my classmates), I never taught seniors. That doesn't worry me that much, I am excited to start.
However, when discussing this with HR, I mentioned the fact that my contract would probably have to change as a "developer" has no consulting task. Amirite ?
Their response wasn't the one I expected: I would keep the same contract but with some compensation for every sessions dispensed.
I don't know much about the law regarding extra-work but I'm pretty sure that a simple developer can not be asked to do said task.
Should I stand with my mind and ask for my status (hence, salary) to change, or should I keep with HR and follow their procedures ?
If so, how can I be sure to be paid accordingly ?
Looking forward to learn from your experiences, Regards,