Airbus designs, manufactures and supports commercial aircraft, helicopters, defence systems and space solutions for civilian and institutional use.
Skywise - Cloud Security Architect
Airbus is recruiting a Cloud Security Architect for the Skywise Cyber Security team in Blagnac. The role involves designing and improving cloud security architecture, particularly on AWS, GCP and Azure, as well as identity and access management. The role requires at least 7 years’ experience in cybersecurity and offers a hybrid model with three days a week in the Blagnac office.
Information about Airbus
- Official domain
- airbus.com
- Open jobs
- 2173
Job details
The full description published by Airbus.
Description de l’offre
Description de l'emploi : Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.
Role Summary: The Cloud Security Architect is a key member of the Security team playing an important role in the definition, management and improvement of our cloud infrastructure and platform services. This position ensures SKYWISE's robust security position is maintained by defining, implementing and improving our cloud security strategy. In this role, you will serve as the primary partner with the SKYWISE Data Platform Operations by defining the security architecture and tools used within our AWS platform for product landing, and other platforms for the company internal operations.
In this frame you will be responsible for the identity and access definition, management and improvement ensuring a strong security posture. Finally this position will define and maintain our cloud security link with Airbus Security Operations Center in order to ensure an efficient monitoring of SKYWISE cloud platforms.
Main Responsibilities
Cloud Infrastructure and Platform Security
- Design and enforce enterprise cloud security baselines, landing zones and internal infrastructure perimeters across SKYWISE cloud platforms (e.g. AWS, GCP)
- Define and implement cloud native Identity and Access Management (IAM) , emphasizing least privilege, short-lived service credentials, and key management infrastructure.
- Ensure regular reviews are performed and define improvements.
- Partner with the Cyber Security Architect to ensure our products are deployed onto secure, isolated and compliant platforms. Infrastructure governance
- Own SKYWISE platform level of compliance to our security standards and certification for cloud security controls.
- Define security controls to ensure global monitoring of our platforms and build a strong relationship with the SKYWISE Data Platform Operations teams. Posture Monitoring and Threat Defense
- Identify and manage our Cloud Security Posture tools to detect drift, unauthorized exposures and misconfiguration in real time.
- Define and implement the architecture rules to ensure global monitoring of our platforms to detect, manage and recover in case of security breaches.
- Be the focal point for the Airbus Security Operations Center with regards to the SKYWISE cloud platforms. Qualified Experience / Skills / Training: Experience & Capabilities:
- 7+ years in cyber security
- 3 or more years working experience in a cloud security architecture in a company or SaaS environment.
- Experience securing native cloud platform services (AWS, GCP, Azure)
- Advanced knowledge of cloud security controls definition (segmentation, key management,...)
- Experience in identity and access management in cloud environments. Knowledge, Skills, Demonstrated Capabilities & Competencies:
- AWS certified security or specialty
- Certified Cloud Security Professional (CSSP)
- Strong cross functional working skills
- Ability to identify and communicate on security risks related to cloud platforms.
- Pragmatic problem solving and proactive.
- A continuous improvement mindset
- Knowledge of DevOps practices and concepts
What we Offer
- Work-Life Balance & Flexibility - Flexible working hours with a hybrid model (3 days per week in our Blagnac office). - 25 annual paid leave days + Collective and individual JRTT (proportional to working time). - A 6th week of paid leave (proportional to working time). - Generous 12-day "family reason absence package." - Family & Health Support - 5 additional full-pay days for maternity, paternity, and adoption leave. - Comprehensive Health Insurance plan. - 3 extra paid annual leave days for employees with RQTH status. - Financial Wellbeing & Savings - Success sharing (intéressement) and profit sharing (participation) schemes. - Monthly seniority bonus for all employees with 3+ years of service. - Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service. - Access to a TSA (Time Saving Account) - Collective and Mandatory Retirement Savings Plans (PERCOL and PERO). - On-site & Other
Perks
Several catering options for lunch (canteens, food trucks, bakeries, etc.). - Staff councils (CSE) offer various social, cultural, and sports activities/services. - Navette (shuttle) service. - Training and development opportunities to support your career growth Cet emploi exige une connaissance des risques de conformité potentiels et un engagement à agir avec intégrité, comme base de la réussite, de la réputation et de la croissance durable de la société.
Unité légale : Skywise Type de contrat : CDI ----- Classe Emploi (France): Classe G14 Niveau d'expérience : Expérimenté(e) Famille d'emplois : Cyber Security En soumettant votre CV ou votre candidature, vous autorisez Airbus à utiliser et stocker des informations vous concernant à des fins de suivi de votre candidature ou de futurs emplois. Ces informations ne seront utilisées que par Airbus. Airbus s'engage à assurer la diversité de sa main-d'œuvre et à créer un environnement de travail inclusif.
Nous accueillons toutes les candidatures, quels que soient le milieu social et culturel, l'âge, le genre, l'invalidité, l'orientation sexuelle ou les croyances religieuses des postulants. Airbus est depuis toujours attaché à l'égalité des chances pour tous. En tant que tel, nous ne demanderons jamais aucun type d’avance de frais dans le cadre d'un processus de recrutement. Toute usurpation d'identité d'Airbus à cette fin doit être signalée à [email protected] . Chez Airbus, nous vous aidons à travailler, à vous connecter et à collaborer plus facilement et de manière plus flexible.
Dans la mesure du possible, nous favorisons les modalités de travail flexibles pour stimuler la pensée innovante.
Requirements
- AWS certified security or specialty
- Certified Cloud Security Professional (CSSP)
- Strong cross functional working skills
Benefits mentioned
- Flexible working hours
- hybrid model
- 25 annual paid leave days
- Comprehensive Health Insurance plan
- Airbus Group saving plans
Apply for this job
How do I apply?
The job is published on Airbus’s website. Open the original posting ↗ to submit your application. Screeningpass does not fill in a form for you.
Who should you write to at Airbus about this role?
Start a contact search from this page. Screeningpass suggests up to three people connected to the role. Choose whom to write to, then Screeningpass looks for their professional email and prepares a message. You review it and send it yourself with Gmail. An email address is not always available, and a reply is never guaranteed.
How much does finding a contact cost?
A search costs 1 credit. Your credit is returned if the search fails. Signing up gives you 3 credits, enough for 3 searches.
What does Screeningpass do?
Screeningpass brings together internships, apprenticeships and jobs published by companies. For a job, Screeningpass finds someone to contact at the company, looks for their professional email and prepares a message using your CV. See how it works in detail.