Cyber Security Engineer

Introduction

Air France / KLM is investing heavily in Cyber Security to protect itself from an ever-increasing threat. As such, the Group constantly maintains its solutions to industry standards, and the teams dedicated to this activity within the Security Operations department have been growing for several years. More than ever, the Company has confirmed this strategy and continues its investments in this area.

The Security Operations Department fulfills two main missions: 

• The SOC, Security Operations Center, continuously monitors and analyzes security events, and responds to/remedies security incidents to prevent cyberattacks and reduce cyber risk.
• The Security Competence Centers provide the security services necessary to protect our AF/KL information system against the growing cyber threat. To ensure these security services, 7 product teams design, implement and operate more than 60 security solutions!

What are you going to do?

Within the Cyber, Cloud & Data Security Competence Center, and more specifically the Cyber Defense product team, you will be required to work on:

•    The integration and industrialization of cloud security solutions in the design and deployment phases (via Cloud Security Posture Management solutions).
•    The integration of market solutions using machine learning and artificial intelligence for the detection of malicious behavior (SIEM: Security Information and Event Management, UEBA: User and Entity Behavior Analytics), in order to support operational security teams (SOC).
•    The deployment and configuration of security incident response automation solutions (SOAR: Security Orchestration, Automation, and Response) to automate the response to security incidents.
•    The integration of solutions to counter the malicious exploitation of vulnerabilities in our applications or environments, in accordance with group security requirements.

Where do you land?

You will be part of a team including Air France personnel (5 FTE in Toulouse and 2 FTE in Valbonne) and KLM (1 FTE) and organized in Agile/Kanban mode. Your official location will be our office in Schiphol-Rijk.

As part of his/her mission, the Cyber Security Engineer interacts very regularly with many people with very different profiles: enterprise architects, experts from other Security teams, systems and network teams, development or business teams in charge of our application products, security partners, security solution publishers.
The Cyber Security Engineer also works in close collaboration with the ISSR team (Information System Security Manager) in charge of analyzing cyber security risks for the various businesses, and defining the Group's security policy.
Finally, he/she is in contact with the SOC teams and is able to provide them with support (proactively or in reaction) on security incidents.

You are interested in IT security and want to contribute to the protection, detection and reaction to threats to our assets and applications in AFKL environments (Azure cloud, Google or legacy/Equinix data centers).
We are looking for a talent like you to join our Cyber Security competence center.

Your profile

• Education: Master's degree in computer science with (ideally) Cyber Security spetialization
• Experience: minimum 2-3 years in IT OPS, DS solution engineering or application development/deployment in Cloud Azure / Google contexts.
• Language skills: Good communication skills, both written and spoken, in English (advanced B2 level required)
• Qualities: Teamwork, analytical rigor, constant curiosity, ability to handle varied subjects, support intervention and contribution of teams in charge of handling security incidents.
  
  

Desired skills

• Knowledge of cloud environments (GCP, Azure).
• Concepts and technologies of computer networks.
• Infra As Code concepts and technologies.
• Ideally, knowledge of application development and major related security principles (OWASP).