Cyber Detection Engineering Lead (d/f/m)

Airbus Defence and Space is looking for a Cyber Detection Engineering Lead (d/f/m) to support its Digital Security Team. This is a critical, high-impact role designed to actively protect the entire organization and world-class products. This is a technical, hands-on position at the heart of the defense strategy—transforming threat intelligence into high-fidelity detection logic and bridging the gap between raw telemetry and actionable security intelligence.

Responsibilities

Define the long-term vision for detection engineering, aligning technical roadmaps with organizational risk profiles while standardizing the development lifecycle; Architect, develop, maintain, and optimize high-fidelity detection rules for the SOC while expanding framework coverage against MITRE ATT&CK and Sigma standards; Analyze Cyber Threat Intelligence (CTI) and translate complex TTPs into proactive, resilient detection logic; Drive Detection-as-Code initiatives and engineer automated response playbooks to streamline incident response and minimize manual intervention; Act as the primary escalation point for complex technical issues, mentoring junior detection engineers and SOC analysts; Partner closely with Incident Response and SOC teams to ensure deployment of context-rich detections that enable rapid threat containment

Requirements

Degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience; Proven track record in developing use cases and detection logic within a Security Operations Center (SOC) environment, including leadership or mentorship experience; Strong proficiency in Python and hands-on experience with automation frameworks to streamline operations; Deep technical expertise in Windows and Linux operating systems, including OS internals, system logging, and telemetry analysis; Practical background in Red Teaming, Penetration Testing, or an offensive mindset to anticipate attacker methodologies; Advanced expertise with the MITRE ATT&CK framework and Detection-as-Code concepts; Strong communication skills with an empathetic, collaborative approach to leading cross-functional teams and technical initiatives

Benefits

Attractive remuneration and individual additional benefits; company pension schemes; mobility offers (e.g., bike leasing); corporate discounts with partner companies; 30 days of annual leave based on collective agreement (35-hour week); flexible working hours (flextime); mobile working; part-time options; job sharing; sabbatical opportunities; excellent professional development opportunities; international, group-wide career perspectives; on-site company doctor; comprehensive health programs (sports courses, preventive care); canteen and cafeteria; local childcare facilities at selected locations; diverse environment with more than 140 nationalities