Skywise - Security Operations Specialist (H/F)

SKYWISE; Toulouse; Hybrid; EUR 55,000 - 85,000; Full time

Benefits offered by this job

Hybrid work model

Flexible hours (hybrid)

Leave benefits

Health insurance

Shuttle service

Lunch options

Career development

Job summary

Skywise Canada Inc. is seeking a Security Operations Specialist to protect and monitor security systems, ensuring compliance with ISO27001 and EASA Part IS.

You will develop and improve security policies and support security initiatives across the organization, collaborating with IT and M&T teams worldwide. The role requires 3–5 years in security operations, strong networking, OS internals, AD architecture, and experience with SIEM, EDR/XDR tools, and firewalls.

Qualifications

• 3 to 5 years of hands-on experience in a Security Operations Center, system administration with a security focus or internal network defense.
• Strong networking experience, Windows/Linux OS internals and AD architecture.
• Expertise in configuring and deploying Enterprise EDR/XDR solutions.
• Proficiency in analyzing the logs from firewalls, systems and network access control.
• Experience with AD threat vectors

Responsibilities

• Internal Security Monitoring: monitor internal network traffic, firewalls, routers and VPN gateways for suspicious activity and unauthorized access.
• Incident Response & Forensic: act as primary responder for internal security incidents and collaborate with Airbus Security Operations Center.
• Vulnerability Management & System Hardening: perform regular internal security vulnerability scans and verify patches with IT and M&T teams.
• Internal Access & Identity Management: monitor active directory for abnormal privilege escalation and rogue device connections.

Skills

SOC experience

Networking experience

Windows internals

AD architecture

EDR/XDR expertise

Tools

SIEM

EDR/XDR tools

Firewalls

Job description

Job Description:

Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.

Role Summary:

The Security Operations Specialist is a key position in the Security team, responsible for focusing on the day-to-day protection and monitoring of security systems to enable the business to comply with SKYWISE’s security policy and certifications (ISO27001 & EASA Part IS). This position will ensure that all security issues are managed in an effective manner in accordance with Policy and certifications (ISO27001 & EASA Part IS). They will propose amendments and improvements to existing Security structures and policies, based on changes in the industry and best practices. This includes supporting and implementing Security initiatives across the organization, helping to develop support of the Security function, and ensuring that all procedures are detailed within the appropriate documents. This position partners with the internal IT and M&T teams to ensure global security across the organization.

Main Responsibilities:

Internal Security Monitoring:

• Continuously monitor internal network traffic, firewalls, routers switches, VPN gateways and local servers for suspicious activity and unauthorized access.
• Analyze alerts, internal flow logs, domain controller activity and endpoint detection and response (EDR/XDR) telemetry.
• Defne, manage and improve Security Information and Event Management (SIEM) correlation rules, detection logic and alters to reduce false positives and catch internal threat vectors.

Incident Response & Forensic:

• Act as the primary responder for internal security incidents (e.g. malware outbreaks, unauthorized device connections, compromised internal user accounts, phishing containment).
• Collaborate with the Airbus Security Operations Center in case of a security event. Ensure evidence collection and event tracking and follow up.

Vulnerability Management & System Hardening:

• Perform regular internal security vulnerability scans cross ours internal networks and assets.
• Manage the security tools for regular scanning by ensuring security requirements are met, and propose improvements.
• Assess the identified vulnerabilities and partner with the SKYWISE IT and M&T teams to prioritize and verify patches for critical internal vulnerabilities.

Internal Access & Identity Management:

• Monitor the active directory for abnormal administrative privileges escalation, dormant account reactivation, or other suspicious activity.
• Monitor internal network to ensure non-compliant or rogue hardware cannot connect to corporate LANs or Wi-Fi.

Qualified Experience / Skills / Training:

Experience & Capabilities:

• 3 to 5 years of hands‑on experience in a Security Operations Center, system administration with a security focus or internal network defense.
• Strong networking experience, Windows/Linux OS internals and AD architecture
• Expertise in configuring and deploying Enterprise EDR/XDR solutions
• Proficiency in analyzing the logs from firewalls, systems and network access control.
• Experience with AD threat vectors

Knowledge, Skills, Demonstrated Capabilities & Competencies:

• Knowledge required on security tools for scanning, EDR/XDR, SIEM and firewalls
• Ability to break down complex issues
• Ability to work efficiently with others in a team environment
• Project management skills and highly organized
• Ability to work in an international environment spanning multiple jurisdiction with potentially different impacts on security.

What we Offer:

• Work-Life Balance & Flexibility
  • Flexible working hours with a hybrid model (3 days per week in our Blagnac office).
  • 25 annual paid leave days + Collective and individual JRTT (proportional to working time).
  • A 6th week of paid leave (proportional to working time).
  • Generous 12-day "family reason absence package."
• Family & Health Support
  • 5 additional full-pay days for maternity, paternity, and adoption leave.
  • Comprehensive Health Insurance plan.
  • 3 extra paid annual leave days for employees with RQTH status.
• Financial Wellbeing & Savings
  • Success sharing (intéressement) and profit sharing (participation) schemes.
  • Monthly seniority bonus for all employees with 3+ years of service.
  • Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service.
  • Access to a TSA (Time Saving Account)
  • Collective and Mandatory Retirement Savings Plans (PERCOL and PERO).
• On-site & Other Perks
  • Several catering options for lunch (canteens, food trucks, bakeries, etc.).
  • Staff councils (CSE) offer various social, cultural, and sports activities/services.
  • Navette (shuttle) service.
• Training and development opportunities to support your career growth

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Skywise Canada Inc.

Contract Type:

Permanent

Experience Level:

Professional

Job Family:

Cyber Security

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail] .

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.