Cyber Incident Handler & Forensics (m/f)

Job Description

Job Description:

Airbus Defense and Space is looking for a passionate and talented Incident Response Analyst to join our international Incident Response Team (CSIRT), in ELANCOURT or TOULOUSE (Palays Site).

A mission critical part for us in order to secure our world-class business. This is a technical, hands-on role that will work with a variety of security tools and technologies protecting our whole enterprise.

The successful candidate will be responsible for managing the entire lifecycle of security incidents from detection to resolution and root cause analysis. You will be responsible for technically managing and escalating security incidents in accordance with our Incident Response plan.

This is a fantastic opportunity to join a team who live and breath for cyber security and to work for a company with great products and technologies around the globe.

This position will require French Nationality and a security clearance or will require being eligible for clearance by the recognized authorities.

You main missions will be:

● Performing threat hunting:
- Conduct Malware Analysis in the context of threat hunting and TTPs discovery
- Contribute to the effort of Threat Intelligence

● Investigation of SOC alerts and security incidents

● Support incident response in crisis mode:
- Be part of the on-call crisis team (deployment reactivity constraints)
- Perform reverse-engineering
- Hosts forensic analysis

● Support the SOC in its daily operations

● Contribute to the industrialization of :
- Tooling
- Network analysis
- Host analysis
- Detection

● Threat detection using system or network capabilities:
- YARA signatures
- Network signatures
- Integration of signatures into internal tools
- Support for IOC searching across the enterprise

● Create or enhance Detection & Response projects:
- Participation to Detection & Response developments

Diploma & technical skills required:

- FR-Bachelor - Computer security and reliability

- Certifications of GIAC or comparable

Experience and knowledge in the following items are welcome

- Perform reverse-engineering

- Hosts forensic analysis

Soft skills :

- Remote working in an international team

- Team collaboration

- Willing to go the extra mile

- Fluent in English and French

#LI-AJ1

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Airbus Defence and Space SAS

Employment Type:

Permanent

-------

Classe Emploi (France): Classe G13

Experience Level:

Professional

Job Family:

Cyber Security <JF-CG-ST>

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com.

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.