Job Description:
SUMMARY
Are you a Cyber Security SW Engineer ready to take on new and exciting challenges?... Are you willing to work in a multi-cultural environment, on a worldwide aerospace leader company?...
If you are a highly motivated Engineer starting to work in Cyber Security field that enjoys innovating, and simplifying solutions and is willing to grow in designing Security Architectures, strong infrastructure and/or secure SW development, and really passionate for Cyber Security, this position may be what you are looking for… Airbus gives you the opportunity to apply for it!.
We are looking for a Cyber Security SW Engineer to join our Product Security team within engineering organization in Airbus Defence & Space in Getafe (Madrid).
You will part of the team in charge of ensuring that the Airbus Defence and Space Products and supporting services are protected against cybersecurity threats throughout their entire lifecycle (i.e. from early R&T phases, definition, development, implementation, industrialization, operation, maintenance and support, through to end of life and disposal). You will work in a new and challenging international environment where cyber security is a key driver to be considered as part of all products designed and developed by Airbus Defence and Space.
You will also have a supporting role in the Product Security activities on the Military Aircraft and UAS programs.
The selected candidate will be eligible to receive state-of the-art training on Cybersecurity and/or Aerospace Engineering.
TASKS & RESPONSIBILITIES
You will contribute to guarantee that the Airbus Defence and Space Products are inherently secure by design and they fulfil the security requirements in accordance to the applicable national/international security regulations.
You will participate in the definition of product security architectures and design in accordance to their security requirements derived from the security risk assessments.
You will help specifying what security controls are to be applied and where in the overall, associated product architecture. You will also participate in the trade-offs that influenced the decisions made in forming the security architecture
You will enable Business by means of providing Cyber security consultancy, guidance to business projects/programs to ensure the fulfilment of the contractual requirements and the Customer expectations.
As a Junior Cyber Security Software Engineer the main responsibilities will be:
Software:
- Participate in Software security requirement definition, design, integration, verification and validation.
- SW designing skills (sequence diagrams, UML diagrams, Class diagrams, pseudocode definition, …).
- Analyze the requirements of developers and test engineers and derive the technical implementation in the building process.
- Participate in the Design and optimize processes and tools in the area of source code management, dependency management, continuous integration, testing and deployment.
- Participate in Static and dynamic code analysis.
Testing :
Unit tests/coverage test.
Integration tests.
Functional tests.
Architecture:
- Participate in Conducting the security risk assessments on the Products (including threat and vulnerability assessment).
- Help Defining the security requirements to mitigate the security risks.
- Participate in the Design of the security architectures in accordance to the security. Ability to define secure SW architecture and design.
- Ensure the security compliance of the Products in accordance to the national and international security regulations.
- Provide cybersecurity consultancy and advisory to business projects.
- Adopt and promote a security-by-design approach with the different projects stakeholders.
- Help in formal compliance processes (security evaluation, certification and accreditation processes) in accordance to the applicable criteria and methodologies (CC/CEM, ITSEC/ITSEM, CCN-STICs...).
REQUIREMENTS
The position requires Information security skills and a solid education in Cyber Security and Information Technology or Engineering.
We seek out curious minds. We value attention to detail, and we care deeply about outcomes. We're looking above all for passionate people, eager to learn, willing to share, customer-centric, establishing innovative ways of working and influencing culture change.
The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs.
This role will involve occasional travel for business and as such the successful candidate must be able to travel according to the business needs.
Technical Skills
Bachelors or Master in Telecommunication Engineer or Computer Science with an emphasis in Information Security.
Masters degree in Cyber Security
Knowledge of the Secure Software Development Life Cycle is highly desired.
Experience in C/C++/C# and/or JAVA.
Be familiar with Visual Studio and SW repositories.
Knowledge of network and application security architecture and operating systems
Advanced level of English.
Able to write clear and consumable security documentation.
Nice to have (not mandatory):
Knowledge in Aircraft Security
Knowledge of EUROCAE material focused on Airworthiness Security Process (ED-202A, ED-203A and ED-204).
Knowledge of NATO/National security regulations.
Experience with critical safety systems based on DO178B/C standards.
Experience with DOORS for requirements specification and management.
Knowledge of Security Evaluation, Certification and Accreditation Processes.
IT Security Professional certification is highly desired (CISSP, SANS/GIAC or equivalent).
Security Training Courses are highly desired (SANS Security Awareness Developer Training)
WHICH BENEFITS WILL YOU HAVE AS AIRBUS EMPLOYEE?
At Airbus we are focused on our employees and their welfare. Take a look at some of our social benefits:
• Vacation days and additional days-off along the year (+35 working days off in total).
• Attractive salary and compensation package.
• Hybrid model of working when possible, promoting the work-life balance (40% remote work).
• Collective transport service in some sites.
• Benefits such as health insurance, employee stock options, retirement plan, or study grants.
• On-site facilities (among others): free canteen, kindergarten, medical office.
• Possibility to collaborate in different social and corporate social responsibility initiatives.
• Excellent upskilling opportunities and great development prospects in a multicultural environment.
• Special rates in products & benefits.
This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.
Company:
Airbus Defence and Space SAU
Employment Type:
Permanent
-------
Experience Level:
Professional
Job Family:
Cyber Security
By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.
Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com.
At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.