Security Operations Specialist – SIEM & Incident Response

Airbus; Toulouse; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid work model (3 days in Blagnac)

25 annual leave days

6th week of paid leave

Family & health support

Health insurance

Shuttle service in Blagnac

Job summary

Skywise, owned by Airbus, seeks a Security Operations Specialist to protect and monitor security systems, ensure compliance with ISO27001 and EASA Part IS, and support security policy improvements. You will collaborate with IT and M&T teams to implement security initiatives across the organization.

The role involves monitoring networks and endpoints, leading incident response, vulnerability management, and identity management in a global environment. Hybrid work with on-site days in Blagnac.

Qualifications

• 3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.
• Strong networking experience, Windows/Linux OS internals and AD architecture.
• Expertise in configuring and deploying Enterprise EDR/XDR solutions.
• Proficiency in analyzing the logs from firewalls, systems and network access control.
• Experience with AD threat vectors.

Responsibilities

• Internal Security Monitoring: monitor network traffic, firewalls, routers, switches, VPN gateways, and local servers for suspicious activity.
• Incident Response & Forensic: act as primary responder for internal security incidents and coordinate with Airbus SOC.
• Vulnerability Management & System Hardening: perform scans, manage tools, and prioritize patches with IT teams.
• Internal Access & Identity Management: monitor Active Directory for privilege escalation and rogue devices.

Skills

SOC experience

Networking

Windows/Linux

AD architecture

EDR/XDR

Log analysis

Tools

EDR/XDR deployment

SIEM

Firewall management

Job description

Skywise, owned by Airbus, seeks a Security Operations Specialist to protect and monitor security systems, ensure compliance with ISO27001 and EASA Part IS, and support security policy improvements. You will collaborate with IT and M&T teams to implement security initiatives across the organization.

The role involves monitoring networks and endpoints, leading incident response, vulnerability management, and identity management in a global environment. Hybrid work with on-site days in Blagnac.