Cyber Defence Analyst L2

Airbus Deutschland GmbH

Job

In this role, you monitor security platforms, analyze security events, and conduct technical investigations to identify and mitigate potential cyber threats.

Job summary

This listing has been machine translated. Show original

Job technologies

Your role in the team

  • Monitoring SOAR, SIEM, EDR/XDR, and network telemetry to detect anomalies, policy violations, and attacker techniques (MITRE ATT&CK)
  • Conducting thorough technical analyses, documenting and triaging security incidents and alerts
  • Investigation of security incidents using threat intelligence and vulnerability assessments
  • Implementation of initial defensive containment measures
  • Supporting threat hunting activities using Cyber Threat Intelligence inputs
  • Supporting Detection Engineering by proposing rule optimizations and updating playbooks based on recurring alerts
  • Creation and updating of security use cases and operational playbooks
  • Preparation of required documentation and presentation of work results

Our expectations of you

Education

  • The job requires knowledge and skills typically acquired through completion of at least three years of relevant vocational training in IT, together with extensive specialist additional qualifications. Equivalent knowledge and skills may also be acquired through advanced professional training (e.g. as a certified technician or business administrator). This also includes master craftspeople or certified specialists with additional responsibilities, such as management duties and professional responsibility for subordinate employees. The knowledge and experience required overall may have been acquired in other ways.

Qualifications

  • Practical experience with security monitoring platforms (e.g., Splunk, Microsoft Sentinel), EDR/XDR solutions (e.g., Microsoft Defender XDR, HarfangLab, Palo Alto Cortex XDR), and log analysis tools
  • Ability to analyze raw logs (Syslog, firewall, DNS, proxy, authentication) and perform basic packet inspection
  • Solid understanding of network protocols, operating system internals (Windows & Linux), Active Directory, and common attack techniques (MITRE ATT&CK Framework)
  • Certifications such as Microsoft SC-200, Splunk Core User, Splunk Power User, Splunk Certified Cybersecurity Defense Analyst, Blue Team Level 1, Blue Team Level 2, Palo Alto certifications, CISSP, CEH, GCIH, or GCFA are a plus.
  • Very good written and spoken German and English skills
  • A security clearance is required for this position, or must be granted by the relevant authorities.

Experience

  • Practical knowledge and experience in security analysis

What we offer

  • The location is just a stone’s throw from Munich, the beautiful capital of Bavaria. Do you enjoy sports and other outdoor activities? The Alps and Lake Starnberg are just an hour away and offer a wide range of leisure activities.

Benefits

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Munich
    Bayern, Germany

About your employer

Airbus is the world's leading provider of air and space transportation, as well as related services.

Language
English
Company type
Established Company
Work model
Full Remote, Hybrid, Onsite
Industry
Vehicle Manufacturing, Supplier · Industry, Production

Employer reviews

3.3Total(1 review)
Career growth
x
3.2
Engineering
x
2.9
Working conditions
x
4.0
Team culture
x
3.5
  • Tröger & Cie. AktiengesellschaftNuremberg, Regensburg, Bayreuth

    • Easy Apply
    • Hybrid
    • Onsite
    • Full Time

    Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...

    • Ethernet
    • C
    • Git
    • Python
    • Bash
    • Linux
    • C++
    • CAN
    • J1939
    • +4
    • +5
  • Öko-Institut Consult gGmbHFreiburg im Breisgau, Berlin

    • Easy Apply
    • Hybrid
    • Onsite
    • Part Time/Full Time

    Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...

    • TCP/IP
    • Active Directory
    • Windows
    • Microsoft Exchange
    • Office 365
    • Linux
    • VLAN
    • +4
  • sinoDusseldorf

    • Easy Apply
    • Onsite
    • Full Time
    • Senior

    sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...

    • Java
    • PHP
    • C#
    • SQL
    • Linux
    • Windows

Cyber Defence Analyst L2

Airbus Deutschland GmbH