Skywise - Security Operations Specialist

Airbus; Toulouse; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid work model (3 days in Blagnac)

25 annual leave days

6th week of paid leave

Family & health support

Health insurance

Shuttle service in Blagnac

Job summary

Skywise, owned by Airbus, seeks a Security Operations Specialist to protect and monitor security systems, ensure compliance with ISO27001 and EASA Part IS, and support security policy improvements. You will collaborate with IT and M&T teams to implement security initiatives across the organization.

The role involves monitoring networks and endpoints, leading incident response, vulnerability management, and identity management in a global environment. Hybrid work with on-site days in Blagnac.

Qualifications

• 3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.
• Strong networking experience, Windows/Linux OS internals and AD architecture.
• Expertise in configuring and deploying Enterprise EDR/XDR solutions.
• Proficiency in analyzing the logs from firewalls, systems and network access control.
• Experience with AD threat vectors.

Responsibilities

• Internal Security Monitoring: monitor network traffic, firewalls, routers, switches, VPN gateways, and local servers for suspicious activity.
• Incident Response & Forensic: act as primary responder for internal security incidents and coordinate with Airbus SOC.
• Vulnerability Management & System Hardening: perform scans, manage tools, and prioritize patches with IT teams.
• Internal Access & Identity Management: monitor Active Directory for privilege escalation and rogue devices.

Skills

SOC experience

Networking

Windows/Linux

AD architecture

EDR/XDR

Log analysis

Tools

EDR/XDR deployment

SIEM

Firewall management

Job description

Job Description:

Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.

Role Summary:

The Security Operations Specialist is a key position in the Security team, responsible for focusing on the day-to-day protection and monitoring of security systems to enable the business to comply with SKYWISE's security policy and certifications (ISO27001 & EASA Part IS). This position will ensure that all security issues are managed in an effective manner in accordance with Policy and certifications (ISO27001 & EASA Part IS). They will propose amendments and improvements to existing Security structures and policies, based on changes in the industry and best practices. This includes supporting and implementing Security initiatives across the organization, helping to develop support of the Security function, and ensuring that all procedures are detailed within the appropriate documents. This position partners with the internal IT and M&T teams to ensure global security across the organization.

Main Responsibilities:

Internal Security Monitoring:

• Continuously monitor internal network traffic, firewalls, routers switches, VPN gateways and local servers for suspicious activity and unauthorized access.
• Analyze alerts, internal flow logs, domain controller activity and endpoint detection and response (EDR/XDR) telemetry.
• Defne, manage and improve Security Information and Event Management (SIEM) correlation rules, detection logic and alters to reduce false positives and catch internal threat vectors.

Incident Response & Forensic:

• Act as the primary responder for internal security incidents (e.g. malware outbreaks, unauthorized device connections, compromised internal user accounts, phishing containment).
• Collaborate with the Airbus Security Operations Center in case of a security event. Ensure evidence collection and event tracking and follow up.

Vulnerability Management & System Hardening:

• Perform regular internal security vulnerability scans across our internal networks and assets.
• Manage the security tools for regular scanning by ensuring security requirements are met, and propose improvements.
• Assess the identified vulnerabilities and partner with the SKYWISE IT and M&T teams to prioritize and verify patches for critical internal vulnerabilities.

Internal Access & Identity Management:

• Monitor the active directory for abnormal administrative privileges escalation, dormant account reactivation, or other suspicious activity.
• Monitor internal network to ensure non-compliant or rogue hardware cannot connect to corporate LANs or Wi‑Fi.

Qualified Experience / Skills / Training:

Experience & Capabilities:

• 3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.
• Strong networking experience, Windows/Linux OS internals and AD architecture
• Expertise in configuring and deploying Enterprise EDR/XDR solutions
• Proficiency in analyzing the logs from firewalls, systems and network access control.
• Experience with AD threat vectors

Knowledge, Skills, Demonstrated Capabilities & Competencies:

• Knowledge required on security tools for scanning, EDR/XDR, SIEM and firewalls
• Ability to break down complex issues
• Ability to work efficiently with others in a team environment
• Project management skills and highly organized
• Ability to work in an international environment spanning multiple jurisdiction with potentially different impacts on security.

What we Offer:

• Work-Life Balance & Flexibility Flexible working hours with a hybrid model (3 days per week in our Blagnac office).
• 25 annual paid leave days + Collective and individual JRTT (proportional to working time).
• A 6th week of paid leave (proportional to working time).
• Generous 12-day "family reason absence package."
• Family & Health Support 5 additional full-pay days for maternity, paternity, and adoption leave.
• Comprehensive Health Insurance plan.
• 3 extra paid annual leave days for employees with RQTH status.
• Financial Wellbeing & Savings Success sharing (intéressement) and profit sharing (participation) schemes.
• Monthly seniority bonus for all employees with 3+ years of service.
• Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service.
• Access to a TSA (Time Saving Account)
• Collective and Mandatory Retirement Savings Plans (PERCOL and PERO).
• On-site & Other Perks Several catering options for lunch (canteens, food trucks, bakeries, etc.).
• Staff councils (CSE) offer various social, cultural, and sports activities/services.
• Navette (shuttle