Airborne Cyber Security Evaluator (d/f/m)

Job Description:

The increasing connectivity of our aircrafts and the digitalization of our products have opened the door to new threats and hence to a growing need for security evaluation activities.
To face these challenges, our team, embedded in the Flight and Integration Test Center, acts as the first attacker to anticipate the threats our airborne products could face. 

To extend our activities and scope, we are currently looking for a Cyber Security Evaluator (d/f/m) for airborne products, based in Hamburg-Finkenwerder, Germany. 

Are you ready for this challenge?

Your location

You will be working at the largest production site for civil aircraft situated in Hamburg. Its location on the southern banks of the river Elbe includes the option to commute by ferry. Your workplace is located in Rüschpark, not far from the plant in Finkenwerder. Experience the special flair of Hamburg in your spare time where vibrant cosmopolitan culture meets nautic legacy.

Your benefits

• Attractive salary and special payments

• 30 days paid vacation and extra days-off for special occasions

• Excellent upskilling opportunities and great international, group wide development prospects

• Special benefits: employer-funded pension, employee stock options, discounted car leasing, special conditions for insurances, transportation subsidy, employee benefits at cooperating companies

• On-site-facilities: Kindergarten close to the site, medical officer for check-ups and other health-related services, canteen and cafeteria

• Compatibility of family & work (job sharing, part-time models, flexible working hours, individual timeout)

• Working in a diverse environment, with more than 140 nationalities, where every voice is heard

What you will do with us as Airborne Products Cyber Security Evaluator (d/f/m):

• Using your curiosity, creativity and experience, to develop and perform adversarial security evaluations against Airbus airborne products and related services in our laboratory test environments.

• To contribute to the design, development, implementation and integration of Airbus airborne products applying an attacker mindset and sharing technical expertise with our international community of system designers and developers.

• To identify weaknesses and/or vulnerabilities on hardware & software by using diverse techniques and tools.

• To compile technical reports and presentations to describe findings, to recommend fixes and to support the security risk analysis process.

• To disseminate your developed attack scenarios and obtain technical knowledge within our team

• To contribute to research and development to explore innovative ways to evaluate Airbus products security.

• To develop tools and test means to test airborne systems.

• Travel for business in Europe and intercontinental is also part of the activity.

Your Experience: 

• Industrial experience in cyber security evaluations and penetration testing.

• Advanced knowledge of computer science. A diploma in Cyber Security will be appreciated but not mandatory.

• Experience regarding network security

• Reverse engineering of binaries and/or low-level programming experience

• Software development skills to support security evaluations (tooling, etc)

• Experience in CTF (Capture The Flag) challenges is appreciated.

Your skills: 

• Network-related attack techniques (scanning, spoofing and exploitation of wired and wireless communication)

• Deep knowledge on Linux-based systems

• Knowledge of virtualization and containerization solutions

• Tool development in Python

• Vulnerability research techniques (on source or object code):  static analysis, dynamic analysis (fuzzing, concolic execution, …) of: C, C++, Python, Java, Bash or other languages

• Knowledge of different architectures (ARM, PowerPC, x86(_64) or FPGA) is helpful

• Radio Frequency skills are appreciated. Knowledge of GPS/GNSS, 4G/5G is a plus.

• Team spirit, curiosity, creativity.

• Aim to develop the ability to communicate effectively and comprehensively to present complex technical approaches and findings.

• Strong analytical and organizational skills with good communication skills in English.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Airbus Operations GmbH

Employment Type:

Permanent

-------

Experience Level:

Professional

Job Family:

Cyber Security

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com.

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.