Skywise - Security Operations Specialist

Airbus; Toulouse; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Health Insurance

6th week paid leave

25 days annual leave

Training & development

Shuttle service

Canteen options

Job summary

Skywise is seeking a Security Operations Specialist to monitor security systems and ensure compliance with ISO27001 and EASA Part IS. You will work with IT and M&T teams to implement security initiatives, manage incidents, and improve security posture across the organization.

The role offers a hybrid work model with 3 days in the Blagnac office, plus extensive health and leave benefits and ongoing training.

Qualifications

• 3–5 years in a SOC, security operations, or secure network defense.
• Experience with EDR/XDR, SIEM, and firewalls.
• Knowledge of AD security and Windows/Linux internals.

Responsibilities

• Monitor internal network traffic, firewalls, VPNs, and hosts for suspicious activity.
• Lead incident response and forensics with IT/M&T partners.
• Conduct vulnerability scans and coordinate patching.
• Monitor Active Directory for abnormal privilege escalation and rogue devices.

Skills

SOC experience

Security monitoring

EDR/XDR

SIEM

Vulnerability management

AD security

Networking

Windows/Linux

Tools

EDR/XDR tools

SIEM platforms

Firewalls

AD architecture

Job description

Job Description:Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.Role Summary:The Security Operations Specialist is a key position in the Security team, responsible for focusing on the day-to-day protection and monitoring of security systems to enable the business to comply with SKYWISE’s security policy and certifications (ISO27001 & EASA Part IS). This position will ensure that all security issues are managed in an effective manner in accordance with Policy and certifications (ISO27001 & EASA Part IS). They will propose amendments and improvements to existing Security structures and policies, based on changes in the industry and best practices. This includes supporting and implementing Security initiatives across the organization, helping to develop support of the Security function, and ensuring that all procedures are detailed within the appropriate documents. This position partners with the internal IT and M&T teams to ensure global security across the organization.Main Responsibilities:Internal Security Monitoring:Continuously monitor internal network traffic, firewalls, routers switches, VPN gateways and local servers for suspicious activity and unauthorized access.Analyze alerts, internal flow logs, domain controller activity and endpoint detection and response (EDR/XDR) telemetry.Defne, manage and improve Security Information and Event Management (SIEM) correlation rules, detection logic and alters to reduce false positives and catch internal threat vectors.Incident Response & Forensic:Act as the primary responder for internal security incidents (e.g. malware outbreaks, unauthorized device connections, compromised internal user accounts, phishing containment).Collaborate with the Airbus Security Operations Center in case of a security event. Ensure evidence collection and event tracking and follow up.Vulnerability Management & System Hardening:Perform regular internal security vulnerability scans across our internal networks and assets.Manage the security tools for regular scanning by ensuring security requirements are met, and propose improvements.Assess the identified vulnerabilities and partner with the SKYWISE IT and M&T teams to prioritize and verify patches for critical internal vulnerabilities.Internal Access & Identity Management:Monitor the active directory for abnormal administrative privileges escalation, dormant account reactivation, or other suspicious activity.Monitor internal network to ensure non-compliant or rogue hardware cannot connect to corporate LANs or Wi-Fi.Qualified Experience / Skills / Training:Experience & Capabilities:3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.Strong networking experience, Windows/Linux OS internals and AD architectureExpertise in configuring and deploying Enterprise EDR/XDR solutionsProficiency in analyzing the logs from firewalls, systems and network access control.Experience with AD threat vectorsKnowledge, Skills, Demonstrated Capabilities & Competencies:Knowledge required on security tools for scanning, EDR/XDR, SIEM and firewallsAbility to break down complex issuesAbility to work efficiently with others in a team environmentProject management skills and highly organizedAbility to work in an international environment spanning multiple jurisdiction with potentially different impacts on security.What we Offer:Work-Life Balance & FlexibilityFlexible working hours with a hybrid model (3 days per week in our Blagnac office).25 annual paid leave days + Collective and individual JRTT (proportional to working time).A 6th week of paid leave (proportional to working time).Generous 12-day \"family reason absence package.\"Family & Health Support5 additional full-pay days for maternity, paternity, and adoption leave.Comprehensive Health Insurance plan.3 extra paid annual leave days for employees with RQTH status.Financial Wellbeing & SavingsSuccess sharing (intéressement) and profit sharing (participation) schemes.Monthly seniority bonus for all employees with 3+ years of service.Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service.Access to a TSA (Time Saving Account)Collective and Mandatory Retirement Savings Plans (PERCOL and PERO).On-site & Other PerksSeveral catering options for lunch (canteens, food trucks, bakeries, etc.).Staff councils (CSE) offer various social, cultural, and sports activities/services.Navette (shuttle) service.Training and development opportunities to support your career growthThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.Company:SkywiseContract Type:Permanent-Classe Emploi (France): Classe G13Experience Level:ProfessionalJob Family:Cyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail] .At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.