Security automation & evaluation specialist (m/f)

Description: Airbus pioneers sustainable aerospace for a safe and united world. The Company constantly innovates to provide efficient and technologically-advanced solutions in aerospace, defence, and connected services. In commercial aircraft, Airbus offers modern and fuel-efficient airliners and associated services. Airbus is also a European leader in defence and security and one of the world's leading space businesses. In helicopters, Airbus provides the most efficient civil and military rotorcraft solutions and services worldwide. Who we are: Within Airbus Commercial Aircraft, digital security topics are managed by our Corporate Digital Security office, a transnational organisation based in France, UK, Germany and Spain, with a direct link to our global infrastructure and sites (e.g. North America, India, China, Asia ?). The Corporate Digital Security office is structured around 5 departments:- Enterprise Security Architecture,- Detection & Response,- Evaluation & Test,- Risk, Vulnerability & Critical Asset,- Cybersecurity Innovation & Scouting. We are a network of leading experts working on projects and collaborations including research & innovation, state of the art solutions development, and technology scouting for cybersecurity across a wide scope of security domains including IT, OT/ICS and Product security. To support our growth, we are currently looking for a Security Automation & Evaluation Specialist (m/f) based in Issy-les-Moulineaux (92), France. You will join the Evaluation & Test department.  What you will do with us: The Evaluation & Test team is responsible for providing advanced capabilities in the discovery, reporting, and remediation recommendations of security vulnerabilities found in both the security technologies consumed/purchased and operated or developed by the organisation.It is done by performing independent evaluation and penetration-testing of systems in order to evaluate the security effectiveness and mitigate system vulnerabilities and weaknesses (e.g. product vulnerability, miss-configurations, unpatched systems, etc.) before they are discovered by external or internal adversaries.To fulfil this mission, the team:- Evaluates the security of products and services by simulating the behaviour of motivated and highly technical attackers- Contributes to the domain's state of the art by developing tools or methodologies- Provides technical expertise on security topics The team works equally on standard IT products (infrastructure, phones, cloud services, etc.) and on the company's own products (planes, helicopters, satellites, etc.) or operational technologies (access control, ICS, video surveillance, etc.). The team's publications are available here:https://github.com/airbus-seclabhttps://airbus-seclab.github.io/ As a Security Automation & Evaluation Specialist (m/f), your main tasks will be the following:- Developing the use of security automation across the group: identify systems where security automation should be introduced, propose technical solutions, review their implementation- Conducting deep-dive security evaluations of products and services- Writing evaluation reports for the products, services and technologies you evaluated- Developing tools, both for short and long term, which enable the team to be more efficient in its missions or allow the company to automate security tests- Publishing open source tools- Attending technical security conferences and publishing articles in your expertise areas This role will involve travel for business in Europe and worldwide and as such you must be able to travel accordingly. The skills we are looking for: We are looking for candidates with the following skills and qualities:- Master's degree in the field of Computer Science, IT, Engineering, or equivalent with a minimum of 5 years of professional experience in in security automation or deep-dive security evaluation- Experience working on the security of cloud-based systems- Designing and implementing automated security measures in at least one of these domains: automated cloud security / automated application security / automated security evaluation- You have strong experience in vulnerability research & exploitation- Strong scripting and programming capabilities- Containerisation and/or virtualization- Program verification/fuzzing- Experience with Linux environment- Curious and open to new subjects- Strong team spirit- Good communication skills and an ability to explain technical subjects- Language skills: Negotiation level of English.Why join us?  1/ Work in a multicultural environment, with a significant scale, on a worldwide perimeter, within a team of security experts providing resilient, agile and cutting edge cyber security solutions for a wide range of assets (IT, OT/ICS, Products).2/ Get the opportunity to grow your skills and capabilities thanks to our Airbus learning offer (digital solutions, classroom sessions, certified training....) and mobility opportunities. Being part of the Airbus team, you will have access to an evolving career plan adapted to your profile.3/ Work in a balanced environment: Beyond the many benefits offered to its employees, joining Airbus is also the guarantee of a respectable work-life balance. Airbus gives you the opportunity to apply your expertise and develop your skills and competencies. Join us!