SOC Security Analyst m/f

Description de l'offre

Cassidian CyberSecurity SAS

European specialist in cyber security, Airbus CyberSecurity’s mission is to protect companies, critical national infrastructures, as well as government and defence organisations against cyber threats. Its reliable and high performance security products and services are able to detect, analyse and neutralise the most sophisticated cyberattacks.

We have more than 800 experts based at our main sites in France, Germany and UK, each with a Security Operating Centre. We also operate in the United States and the Middle East. This division is particularly active in the markets of surveillance, investigation and security audits for the systems most exposed to threats within the Airbus Group, but also for partners and customers in the transport, defence and aerospace sectors.

 

Description of the job

Within the SOC of Airbus CyberSecutity, and under the responsibility of the head of SOC, the Security Analyst (L2) belongs to the operational team in charge security monitoring, threat and vulnerabilities survey. The main mission of the Security Analyst is to monitor the Security, to deal with the security incidents which are detected by the Service and to lead in depth analysis on these incidents.

Tasks & accountabilities

In detail, the Security Analyst assumes the following tasks:

Security monitoring duties
- Investigates deeper on the detected behaviours
- Uses multiple tools and data sources to analyze, to add context in order to understand the behaviour.
- Participates to crisis management by providing support to L3 & SDM.
- Able to create reports and visualizations of security attacks
- Tracks trends for metrics and reporting
- Works on the decrease of false positives

Customer relation
- Participates to recurrent meeting with the customers as a technical referent.
- Provides recommendation or workaround to the customer in order to reduce business impact
- Is responsible with the Service Delivery Manager (SDM) to continuously improve the service
- Supports the SDM to prepare customer's meetings.

Others
- Knows perfectly attacks methods and security equipment functions.
- Participates in the improvement and development of process/procedure manuals and documentation
- Can work independently to perform analyses and investigations
- Possess an Information Security and operational oriented mindset

Due to the 24x7x365 nature of SOC operations, analysts will be required to work on duty including nights and weekends.
The position is based in Toulouse, it however requires a preliminary training in Elancourt SOC for a duration of 3 up to 6 months.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Required skills

The successful applicant should have the following skills and experience:
- Educated to a 5-year degree level (or equivalent) in Cyber Security or a related discipline.
- At least 3 years’ experience in a similar position and ISO27001 certification.
- Strong knowledge of cyber defence products: IDS/IPS, Log management system, SIEM, Vulnerability scanner, APT detection tools, etc.
- Ability to use Linux and Windows.
- You are curious, committed and involved. As part of a team, you favour transparency and listen to your team members.
- Language skills: Advanced level of English.