Job Description:

In order to support our operations, Airbus Commercial is looking for a

Cyber Security Evaluator (d/f/m)

Airbus is a global industrial player and aircraft manufacturer with the highest standards of safety and security. The increasing connectivity of our aircraft and the digitalization of our products have opened the door to new threats and hence to a growing need for security evaluation activities.

To face these challenges, our team, embedded in the Flight and Integration Test Center, acts as the first attacker to anticipate the threats our airborne products could face. Composed of specialists combining multiple competencies in avionics, networks, radio transmissions, operating systems, cryptography and more. This transnational team is recognized company-wide for its unique expertise combining avionics and security skills.

To extend our activities and scope, we are currently looking for a Cyber Security Evaluator (m/f/d) for airborne products, based in Hamburg-Finkenwerder, Germany. Your main role is to perform security evaluations on airborne products and systems and to identify security weaknesses before their entry into service or affecting the in-service aircraft. As our environment is constantly evolving, you also contribute actively to the continuous improvement of our activities by exploring new attack techniques, tracking new technologies, developing scripts and tools supporting the security evaluation of airborne products.

Are you ready for this challenge?

Your Location

You will be working at the largest production site for civil aircraft situated in Hamburg. Its location on the southern banks of the river Elbe includes the option to commute by ferry. Experience the special flair of Hamburg in your spare time where vibrant cosmopolitan culture meets nautic legacy.

What you will do with us as Airborne Products Cyber Security Evaluator (m/f):

• Using your curiosity, creativity and experience, to develop and perform adversarial security evaluations against Airbus airborne products and related services in our laboratory test environments.
• To evaluate the security of our products and systems, gathering system or multi-system configuration items and performing configuration reviews.
• To contribute to the design, development, implementation and integration of Airbus airborne products applying an attacker mindset and sharing technical expertise with our international community of system designers and developers.
• To identify weaknesses and/or vulnerabilities on hardware & software by using diverse techniques and tools.
• To compile technical reports and presentations to describe findings, to recommend fixes and to support the security risk analysis process.
• To disseminate your developed attack scenarios and obtain technical knowledge within our team
• To contribute to research and development to explore innovative ways to evaluate Airbus products security.
• To develop tools and test means to test airborne systems.

This role will involve some travel for business in Europe and worldwide, and as such, you must be able to travel accordingly.

We are looking for candidates with the following skills and qualities, please do not hesitate to apply (in English) for the position, even if you partially fulfill the list below:

Experience:

• Industrial experience in cyber security evaluations and penetration testing.
• Advanced knowledge of computer science. A diploma in Cyber Security will be appreciated but not mandatory.
• Experience regarding network security
• Reverse engineering of binaries and/or low-level programming experience
• Software development skills to support security evaluations (tooling, etc)
• Experience in CTF (Capture The Flag) challenges is appreciated.

Hard skills:

• Network-related attack techniques (scanning, spoofing and exploitation of wired and wireless communication)
• Deep knowledge on Linux-based systems
• Knowledge of virtualization and containerization solutions
• Tool development in Python
• Vulnerability research techniques (on source or object code):  static analysis, dynamic analysis (fuzzing, concolic execution, …) of: C, C++, Python, Java, Bash or other languages
• Knowledge of different architectures (ARM, PowerPC, x86(_64) or FPGA) is helpful
• Radio Frequency skills are appreciated. Knowledge of GPS/GNSS, 4G/5G is a plus.

Softskills:

• Team spirit, curiosity, creativity.
• Aim to develop the ability to communicate effectively and comprehensively to present complex technical approaches and findings.
• Strong analytical and organizational skills with good communication skills in English.

Please include your starting date and salary expectations in your application and apply in English.

Why join us?

1 - Work on adversarial security evaluation for the Airbus airborne product portfolio, incl. aircraft and helicopter equipment and be an active contributor to the safety and security of aviation.
2 - Work in a multicultural environment, on a growing spectrum of activities, on a worldwide perimeter, within a team of security evaluation specialists.
3 - You will have the opportunity to apply your expertise, to develop your skills, competencies and your personal project. You will attend some specialized Cyber Security conferences.
4 - Work in a balanced environment: beyond the many benefits offered to its employees, joining Airbus is also the guarantee of a respectable work-life balance.

Your Benefits

• Fair Compensation & Extras: Attractive remuneration and individual additional benefits, such as company pension schemes, mobility offers (e.g., bike leasing), or corporate discounts with partner companies in accordance with our current guidelines.
• Time for You (and Your Loved Ones): 30 days of annual leave based on our collective agreement (35-hour week); work-life balance through flexible working hours (flextime), mobile working, part-time options, job sharing, and sabbatical opportunities.
• Growth Made Easy: Excellent professional development opportunities and international, group-wide career perspectives.
• Feel Good at Work: On-site company doctor; comprehensive health programs (sports courses, preventive care, etc.), canteen and cafeteria, and local childcare facilities at selected locations.
• Diversity Connects: Work in a diverse environment with more than 140 nationalities, where exchange, mutual support, and inclusion are part of our DNA.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Airbus Operations GmbH

Employment Type:

Permanent

-------

Experience Level:

Professional

Job Family:

Cyber Security <JF-CG-ST>

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com.

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.