Product Security Engineer (MCS and Incident Management)

Job Description:

Airbus Defence and Space is looking for a Product Security Engineer (Special France) (f/m) in Toulouse, France (Saint Martin du Touch).

Are you a Cyber Security Architect ready to take on new and exciting challenges?... Do you dare to accept the challenge of working for a worldwide aerospace leader company?...

The jobholder will contribute to ensure the Security of Airbus products and supporting services and systems across Airbus Defence and Space during the whole product life cycle, from the development to the end of support.

The jobholder will manage all Military Air Systems (MiAS) activities related to vulnerabilities management and their associated analysis on the related product context, in close collaboration with the TEYWP and TEYWP-TL1 Product Security Leaders.

The jobholder will run the MCS (“Maintien en Condition de Sécurité”) activities and provide the MCS deliverables in accordance with Customer requirements, Airbus and Aviation Cyber directives and regulations.

The jobholder will be responsible to manage and update the MCS process, methods and tools that will allow Airbus Defense and Space to fit the Customer requests, contracts, Airbus directives and Navigation Authorities regulations during the overall Product life circle.

Notably, the jobholder will perform and manage all activities related to the identification and to the analysis of the vulnerabilities that may impact the products, and will propose and follow associated security mitigation plans to ensure that Airbus DS products remain secure.

The Jobholder will first manage the MRTT France MCS and will develop the activity towards other MiAS products and contribute to the MCS offers to come in the future contracts with existing or new customers.

The jobholder will work in the incident management process for the platforms related. Including response, investigation and interface with the internal and external stakeholders.

This position will require a French and NATO security clearance at Secret level.

• Financial rewards: Attractive salary, agreements on success and profit sharing schemes, employee savings plan abounded by Airbus and employee stock purchase plan on a voluntary basis.

• Work / Life Balance:  Extra days-off for special occasions, holiday transfer option, a Staff council offering many social, cultural and sport activities and other services.

• Wellbeing / Health: Complementary health insurance coverage (disability, invalidity, death). Depending on the site: health services center, concierge services, gym, carpooling application.

• Individual development: Great upskilling opportunities and development prospects  with unlimited access to &43;10.000 e-learning courses to develop your employability, certifications, expert career path, accelerated development programmes, national and international mobility.

At Airbus, we support you to work, connect and collaborate more easily and flexibly.    Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.

• Support all technical discussions related to MCS.

• Support the product security architects and product security directors in the security risk analysis, the design and implementation steps (e.g., component selection, components integration, …) of the products, highlighting the criteria that will ease the MCS and obsolescence management during the whole product lifecycle

• Manage the MCS activities in order to identify continuously vulnerabilities and weaknesses that may impact the products and propose organizational and Technical measures to mitigate the associated risks.

• Run and update the MCS related process, methods and tools

• Manage towards the customer the MCS contractual deliverables and workshops

• Define the security requirements related to MCS in conformity with Airbus directives, Customer and Aviation authorities’ requirements and in close relationship with the Product Security Directors.

In addition the Product Security Architect role will include:

• Participation to security workshops associated to product development.

• Participation to all MCS studies concerning French programs.

• Support Security assurance process and evaluations activities.

• Support the development of security measures to protect and defend Airbus products and systems by ensuring their safety, confidentiality, integrity and availability.

• Guarantee of the compliance on the security requirements against Airbus, national, international and Aviation security regulations.

• Participate in the development of innovative technology solutions in term of information security.

• Support of assessments and audits of the information security aspects projects and product lines across Airbus Defence and Space to ensure compliance with Airbus business, customer and national security requirements.

• To develop, review and improve the Airbus product security policies, methods and tools

• Support Product Security Architects/Directors in the development of secure configuration guidelines for products and systems.

• Support a culture of engagement across the engineering organization, which emphasizes shared responsibility in achieving secure designs.

This role will involve occasional travel for business and as such the jobholder must be able to travel according to the business needs.

• Educated to engineering degree level in cyber security (or equivalent).

• A minimum 10 years of experience in engineering (system engineering, information systems, information security, product security, embedded systems, software or hardware product development, electronic communications, complex network integration, systems auditor, Software auditor).

Experience should be in the following fields:

• Knowledge in Aircraft Information System Security architecture.

• Strong knowledge in Information Systems Security design architecture.

• Strong knowledge in security for networking and communications protocols.

• Strong knowledge in vulnerabilities analysis in the product usage context

• Knowledge of French National/NATO security regulations and their implementation.

• COTS management

• Vulnerabilities management

• Capability and wish to work in a multicultural team

• Capability and wish to adapt the security technical communication to heterogeneous colleagues (not security related domain peers, leaders)

• Typical risk management decisions and necessary mitigations.

• Systems and applications security architecture design.

• Knowledge in Aircraft Information Security architecture.

• Knowledge on French regulation concerning security product (evaluation, ANSSI agreement, ..).

• Understanding of Security Management concepts within customer organizations across the Airbus Defence and Space client base.

• Knowledge of EUROCAE Aviation Cyber Security Processes, Tools and Documentation (ED202, ED203).

Soft skills :

• Strong team spirit.

• Excellent interpersonal and strong leadership skills.

• Strong oral and written communication skills.

• Enthusiastic and proactive approach.

• Advance level in English.

• Ability to learn and grow in an evolving environment.

• Ability to work in a Transversal Engineering Function.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Le candidat doit posséder la nationalité française conformément à l’IGI 1300 du 9 Août 2021 (1.2.2.1).t

LI-JR1

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Employment Type:

-------

Experience Level:

Job Family:

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom&64;airbus.com.

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.