INGÉNIEUR EN SÉCURITÉ LOGICIELLE (H/F)

Profil recherché

Votre profil:

Diplôme d'ingénieur ou équivalent

Expertise technique :

JAVA et C++ sous Linux (2 années minimum) avec une expérience réussie en tant que réfèrent technique

Kotlin, Spring boot, programmation réactive avec Spring 

Analyse et la prévention des CVE (OWASP...)

Authentification et en Autorisation (keycloak, OpenID Connect, SAML, OAuth2, LDAP, AD, IDP, Access Control, ?

Sécurité des passerelles (API gateways, ..)

Offuscation et en protection des binaires

Protocole HTTP (et TLS) et cryptographie (et OpenSSL)

Bonnes connaissances :

Sécurité des logiciels Web (DoS, injections, XSS, CSRF, CORS, Man-in-the-Middle ...)

Bases de données (NoSQL DB MongoDB, Postgresql, ?

Sécurité sur les Clouds publiques (GCP, AWS, Azure) et les solutions privées (OpenShift, Rancher)

Technologies de containerisation (Docker, K8S, ?)

CI/CD (gitlab, gitlab-ci, artifactory, harbor, ?)

Sécurisation des éléments de configuration et de l'exposition des données

Connaissances :

Agile scrum, SAFe, Kanban

Informatique distribuée, plateformes & environnement cloud, SaaS

Tests logiciels

 Linux Bash

Infrastructure As Code (Salt Stack, Terraform, Ansible)

Utilisateur des outils MS Office et des outils de collaborations (ex: JIRA, Confluence ?)

Curieux, rigoureux, organisé et autonome

Capacité à travailler en équipe

Sens des responsabilités et leadership

Anglais lu, écrit, parlé

Ce poste nécessite une habilitation de sécurité ou nécessite d'être éligible à une habilitation par les autorités reconnues.

Des déplacements professionnels (moins d'une fois par mois) en France (Toulouse & Paris) sont à prévoir.

Vous ne matchez pas à 100%? Pas d'inquiétude! Airbus vous accompagnera dans votre plan de développement.

Donnez une nouvelle dimension à votre carrière en candidatant en ligne maintenant! 

Airbus Defence and Space is looking for a Senior Software Security Engineer (f/m) to join our Airbus Defence & Space GEO SA Department based in Sophia-Antipolis, France.

You will be part of the Cloud based & Legacy Geo products team in charge of development and maintenance of software security components developed by Sophia-Antipolis teams.

Main security components:

Platform management: Cloud-ready identify management tool (id-broker, subscription management, AAA)

SDK Protection: Cloud-ready SDK to protect C++ algorithms on multi architecture solutions

As senior software developer, within a SAFe agile team, you are responsible to analyse, design, implement, test, integrate, deploy and maintain our security software components and services by keeping the ?On Quality, On Time, On Cost? (OQOTOC) product approach.

In collaboration with transversal teams (Architect, Business Analyst, IVV, Infrastructure/DevOps, Software Factory), as part of the SAFe Team you are responsible of the quality of the sprint deliverables for each increment.

How we care for you:

Financial rewards: Attractive salary, agreements on success and profit sharing schemes, employee savings plan abounded by Airbus and employee stock purchase plan on a voluntary basis.

Work / Life Balance:  Extra days-off for special occasions, holiday transfer option, a Staff council offering many social, cultural and sport activities and other services.

Wellbeing / Health: Complementary health insurance coverage (disability, invalidity, death). Depending on the site: health services center, concierge services, gym, carpooling application.

Individual development: Great upskilling opportunities and development prospects  with unlimited access to +10.000 e-learning courses to develop your employability, certifications, expert career path, accelerated development programmes, national and international mobility.

At Airbus, we support you to work, connect and collaborate more easily and flexibly.    Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.

Your challenges:

As Senior Dev

Implement new components/services from architect technical inputs, Product Owner functional Inputs and Internal specialist guidelines

Test (Unit, Functional, Non-functional, Non Regression, Performance, Security ...) on local development environment and on remote cloud platforms (GCP/Azure/AWS/OpenShift/Rancher?)

Continuously increase the quality of delivered components and services

Actively participate to backlog item refinement

Participate to ceremonies of the framework used on your projects (Safe, Kanban, Scrum, waterfall?)

As Tech Lead :

Work closely with Architects to be define and review security aspects on software designs and architectures

Lead other software engineers on security topics: training/mentoring, code & design reviews, load estimations...

Actively participate to software developers communities (software development languages)

Participate to the Continuous Integration and Continuous Delivery ecosystem

Compliance & Security:

Work closely with Architects and Specialists to be a referent in our security software components and services (cloud and bare metal)

Increase the Security Level of delivered components and services (regular and frequent actions to reduce the number of CVE)

Active technological watch and state of the art evolutions on software security topics

Involved in security condition maintenance (French ?MCS?) of all components, products and services developed by Sophia-Antipolis teams

Active support during security compliance (security analysis reports, security matrix analysis, interactions with Operational Security and Governance Security teams...)

Active support during security audit or pen-tests

Business travels can be expected (less than once month) in France (Toulouse & Paris) and you must be willing to travel accordingly.

Your profile:

Engineer degree or equivalent

Competencies:

JAVA and C++ software languages on Linux (2 years minimum)

Kotlin, Spring boot, Reactive programing with Spring 

CVE analysis and prevention (OWASP...)

Authentication and Authorization (keycloak, OpenID Connect, SAML, OAuth2, LDAP, AD, IDP, Access Control, ?)

Gateway security

Obfuscation and protection

HTTP Protocol and TLS

Cryptography and OpenSSL

Web software security (DoS, injections, XSS, CSRF, CORS, Man-in-the-Middle)

Databases (NoSQL DB MongoDB, Postgresql, ?)

Cloud security on GCP, AWS, Azure, OpenShift, Rancher

Containers technologies (Docker, K8S, ?)

CI/CD (gitlab, gitlab-ci, artifactory, harbor, ?)

Securing configuration and data exposure

Knowledge: Agile scrum, SAFe, Kanban, distributed computing, cloud platform & environment, SaaS, software testing, Linux Bash, Infrastructure As Code (Salt Stack, Terraform, Ansible)

Use of office tools and agile project tools (ex: JIRA, Confluence ?)

Curious, team player, autonomous

Sense of responsibility, leadership

Advanced English

This position requires a security clearance or will require being eligible for clearance by the recognized authorities.

Not a 100% match? No worries! Airbus supports your personal growth with customized development solutions.

Take your career to a new level and apply online now!

Cet emploi exige une connaissance des risques de conformité potentiels et un engagement à agir avec intégrité, comme base de la réussite, de la réputation et de la croissance durable de la société.