Cybersecurity Detection Designer Lisboa

Cybersecurity Detection Designer
Lisboa
Lisboa, Portugal

Press continue to see content specific to your location.

Germany

Cybersecurity Detection Designer

Lisboa

EUR 40, 000 - 60, 000

Job Description:

Responsibilities - your mission

In order to increase compliance regarding handling of sensitive data, Airbus Cyber Security has created a new product to manage this perimeter; the Data Compliance Center (DCC). Its main objective is to ensure that potential
- compliance of sensitive (e. g Internal Classification, Export Control) data transfers and hosting, has the corresponding detection, alerting and remediation in place.

As a Cybersecurity Detection Designer, you will be at the forefront of fortifying our data security and compliance efforts by crafting and improving Splunk Enterprise Security (Splunk ES) correlation searches and Security Orchestration, Automation, and Response (SOAR) playbooks. Collaborating closely with analysts and the broader team, your role is crucial in translating business requirements into effective detection and alerting
- cases while streamlining incident response.

1. Create Splunk correlation searches tailored to various
   - cases, aligning them with specific business requirements and security objectives.
2. Continuously improve existing
   - cases to enhance detection accuracy and reduce false positives.
3. Develop and refine automation playbooks within the SOAR platform, streamlining incident response processes.
4. Craft efficient response procedures for various
   - cases, ensuring consistency and effectiveness.
5. Translate business requirements into detection and alerting
   - cases that align with security and compliance goals by collaborating closely with business analysts.
6. Utilize scripting, particularly Python, to enhance the functionality of detection mechanisms and automation workflows.
7. Collaborate with the framework teams to integrate SOAR capabilities into our security framework.

General Requirements - our ideal candidate will have

1. Proficiency in scripting or programming languages, particularly SQL and Python.
2. Knowledge of tools such as Git for version control.
3. Knowledge of CI/CD pipelines and tools.
4. Basic knowledge of Splunk or similar SIEM tools, with a willingness to learn and expand expertise.
5. Strong
   - solving skills and the ability to align technical solutions with business requirements.
6. Effective communication skills for collaborative work within
   - functional teams.
7. Detail-oriented and analytical mindset.
8. Eagerness to learn and adapt to evolving security technologies and methodologies.

Benefits - what’s in it for you

1. Diverse career opportunities within Airbus European core countries or in other regions around the world.
2. A hybrid working model, allowing you to combine onsite and offsite work.
3. A modern office at Parque das Nacoes, well connected to public transportation.
4. A motivated and fun crew to grow and build and shape the GBS together.
5. An intense and exciting onboarding experience.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.