Skywise - Security Operations Specialist

Airbus; Southwestern Ontario; Hybrid; CAD 86,000 - 140,000; Full time

Benefits offered by this job

Flexible work hours

Hybrid work model (Blagnac office)

Generous leave package

Job summary

Skywise, a leading digital services company wholly owned by Airbus, seeks a Security Operations Specialist to monitor security systems and ensure compliance with ISO27001 and EASA Part IS.

You will partner with IT and M&T teams to drive security initiatives, respond to incidents, and support security documentation in a hybrid work model.

Qualifications

• 3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.

Responsibilities

• Monitor internal network traffic, firewalls, routers/switches, VPN gateways and local servers for suspicious activity and unauthorized access.

Skills

Security Operations Center

Network security

Windows

Linux

Active Directory

EDR/XDR

Tools

SIEM tools

EDR/XDR solutions

Firewalls

AD

Job description

Job Description:

Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.

Role Summary:

The Security Operations Specialist is a key position in the Security team, responsible for focusing on the day-to-day protection and monitoring of security systems to enable the business to comply with SKYWISE's security policy and certifications (ISO27001 & EASA Part IS). This position will ensure that all security issues are managed in an effective manner in accordance with Policy and certifications (ISO27001 & EASA Part IS). They will propose amendments and improvements to existing Security structures and policies, based on changes in the industry and best practices. This includes supporting and implementing Security initiatives across the organization, helping to develop support of the Security function, and ensuring that all procedures are detailed within the appropriate documents. This position partners with the internal IT and M&T teams to ensure global security across the organization.

Main Responsibilities:

Internal Security Monitoring:

• Continuously monitor internal network traffic, firewalls, routers switches, VPN gateways and local servers for suspicious activity and unauthorized access.
• Analyze alerts, internal flow logs, domain controller activity and endpoint detection and response (EDR/XDR) telemetry.
• Defne, manage and improve Security Information and Event Management (SIEM) correlation rules, detection logic and alters to reduce false positives and catch internal threat vectors.

Incident Response & Forensic:

• Act as the primary responder for internal security incidents (e.g. malware outbreaks, unauthorized device connections, compromised internal user accounts, phishing containment).
• Collaborate with the Airbus Security Operations Center in case of a security event. Ensure evidence collection and event tracking and follow up.

Vulnerability Management & System Hardening:

• Perform regular internal security vulnerability scans across our internal networks and assets.
• Manage the security tools for regular scanning by ensuring security requirements are met, and propose improvements.
• Assess the identified vulnerabilities and partner with the SKYWISE IT and M&T teams to prioritize and verify patches for critical internal vulnerabilities.

Internal Access & Identity Management:

• Monitor the active directory for abnormal administrative privileges escalation, dormant account reactivation, or other suspicious activity.
• Monitor internal network to ensure non-compliant or rogue hardware cannot connect to corporate LANs or Wi‑Fi.

Qualified Experience / Skills / Training:

Experience & Capabilities:

• 3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.
• Strong networking experience, Windows/Linux OS internals and AD architecture
• Expertise in configuring and deploying Enterprise EDR/XDR solutions
• Proficiency in analyzing the logs from firewalls, systems and network access control.
• Experience with AD threat vectors

Knowledge, Skills, Demonstrated Capabilities & Competencies:

• Knowledge required on security tools for scanning, EDR/XDR, SIEM and firewalls
• Ability to break down complex issues
• Ability to work efficiently with others in a team environment
• Project management skills and highly organized
• Ability to work in an international environment spanning multiple jurisdiction with potentially different impacts on security.

What we Offer:

• Work-Life Balance & Flexibility Flexible working hours with a hybrid model (3 days per week in our Blagnac office).
• 25 annual paid leave days + Collective and individual JRTT (proportional to working time).
• A 6th week of paid leave (proportional to working time).
• Generous 12-day "family reason absence package."
• Family & Health Support 5 additional full-pay days for maternity, paternity, and adoption leave.
• Comprehensive Health Insurance plan.
• 3 extra paid annual leave days for employees with RQTH status.
• Financial Wellbeing & Savings Success sharing (intéressement) and profit sharing (participation) schemes.
• Monthly seniority bonus for all employees with 3+ years of service.
• Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service.
• Access to a TSA (Time Saving Account)
• Collective and Mandatory Retirement Savings Plans (PERCOL and PERO).
• On-site & Other Perks Several catering options for lunch (canteens, food trucks, bakeries, etc.).
• Staff councils (CSE) offer various social, cultural, and sports activities/services.
• Navette (shuttle