Social network you want to login/join with: Cybersecurity Detection Designer, Lisboa
Location: Lisboa, Portugal
Job Category: Other
EU work permit required: Yes
Job Reference: 001e88be3b65
Job Views: 3
Posted: 24.04.2025
Expiry Date: 08.06.2025
Job Description: Responsibilities - your mission
In order to increase compliance regarding handling of sensitive data, Airbus Cyber Security has created a new product to manage this perimeter; the Data Compliance Center (DCC).
Its main objective is to ensure that potential non-compliance of sensitive (e.G Internal Classification, Export Control) data transfers and hosting, has the corresponding detection, alerting and remediation in place.
As a Cybersecurity Detection Designer, you will be at the forefront of fortifying our data security and compliance efforts by crafting and improving Splunk Enterprise Security (Splunk ES) correlation searches and Security Orchestration, Automation, and Response (SOAR) playbooks.
Collaborating closely with analysts and the broader team, your role is crucial in translating business requirements into effective detection and alerting use-cases while streamlining incident response.
Create Splunk correlation searches tailored to various use-cases, aligning them with specific business requirements and security objectives.Continuously improve existing use-cases to enhance detection accuracy and reduce false positives.Develop and refine automation playbooks within the SOAR platform, streamlining incident response processes.Craft efficient response procedures for various use-cases, ensuring consistency and effectiveness.Translate business requirements into detection and alerting use-cases that align with security and compliance goals by collaborating closely with business analysts.Utilize scripting, particularly Python, to enhance the functionality of detection mechanisms and automation workflows.Collaborate with the framework teams to integrate SOAR capabilities into our security framework.General Requirements - our ideal candidate will have
Proficiency in scripting or programming languages, particularly SQL and Python.Knowledge of tools such as Git for version control.Knowledge of CI/CD pipelines and tools.Basic knowledge of Splunk or similar SIEM tools, with a willingness to learn and expand expertise.Strong problem-solving skills and the ability to align technical solutions with business requirements.Effective communication skills for collaborative work within cross-functional teams.Detail-oriented and analytical mindset.Eagerness to learn and adapt to evolving security technologies and methodologies.Benefits - what's in it for you
Diverse career opportunities within Airbus European core countries or in other regions around the world.A hybrid working model, allowing you to combine onsite and offsite work.A modern office at Parque das Nacoes, well connected to public transportation.A motivated and fun crew to grow and build and shape the GBS together.An intense and exciting onboarding experience.This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.
#J-18808-Ljbffr