{"id":180323,"url":"https://alion.io/job/airbus-cyber-detection-engineering-lead-dfm","title":"Cyber Detection Engineering Lead (d/f/m)","company":{"id":3100,"name":"Airbus","domain":"airbus.com","url":"https://alion.io/company/airbus","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":757,"ghost_share":0.005,"stale_share":0.664,"repost_share":0.015,"time_to_fill_p50_days":27,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ottobrunn, Germany","Ulm, Germany","Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":192000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"Linux","optional":true},{"name":"Python","optional":true},{"name":"Red Teaming","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-08-31T15:35:48Z","employer_posted_date":"2026-08-31","last_verified_at":"2026-11-02T07:15:03Z","board_verified":true,"closed_at":null,"days_open":62,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":62},"description":"Job Description:\nIn order to support our Digital Security Team, Airbus Defence and Space is looking for a\nCyber Detection Engineering Lead (d/f/m)\nRole Overview\nTo support our Digital Security Team, Airbus Defence and Space division is seeking a highly skilled Leader Role for Detection Engineer (d/f/m). This is a critical, high-impact role designed to actively protect our entire organization and our world-class products.\nThis is a technical, hands-on position that sits at the heart of our defense strategy. You will not simply respond to alerts; you will be the architect of our detection ecosystem-transforming threat intelligence into high-fidelity detection logic and bridging the gap between raw telemetry and actionable security intelligence.\nYour location\nOur site is just a stone's throw away from Munich, the beautiful capital of Bavaria. You are into sports and other outdoor activities? The Alps and Lake Starnberg are within an hour’s reach, offering a multitude of recreational options. Possible work locations include Manching, Taufkirchen/Ottobrunn, Immenstaad am Bodensee, and Ulm.\nOur Benefits for You\nFair Compensation & Extras: Attractive remuneration and individual additional benefits, such as company pension schemes, mobility offers (e.g., bike leasing), or corporate discounts with partner companies in accordance with our current guidelines.\n\nTime for You (and Your Loved Ones): 30 days of annual leave based on our collective agreement (35-hour week); work-life balance through flexible working hours (flextime), mobile working, part-time options, job sharing, and sabbatical opportunities.\n\nGrowth Made Easy: Excellent professional development opportunities and international, group-wide career perspectives.\n\nFeel Good at Work: On-site company doctor; comprehensive health programs (sports courses, preventive care, etc.), canteen and cafeteria, and local childcare facilities at selected locations.\n\nDiversity Connects: Work in a diverse environment with more than 140 nationalities, where exchange, mutual support, and inclusion are part of our DNA.\n\nYour tasks and responsibilities\nLead Detection Strategy: Define the long-term vision for detection engineering, aligning technical roadmaps with organizational risk profiles while standardizing the development lifecycle.\n\nEngine & Rule Lifecycle Management: Architect, develop, maintain, and optimize high-fidelity detection rules for the SOC while expanding framework coverage against MITRE ATT&CK® and Sigma standards.\n\nThreat Intelligence Translation: Analyze Cyber Threat Intelligence (CTI) and translate complex TTPs into proactive, resilient detection logic.\n\nAutomation & Orchestration: Drive \"Detection-as-Code\" initiatives and engineer automated response playbooks to streamline incident response and minimize manual intervention.\n\nTechnical Mentorship & Escalation: Act as the primary escalation point for complex technical issues, mentoring junior detection engineers and SOC analysts.\n\nCross-Functional Collaboration: Partner closely with Incident Response and SOC teams to ensure deployment of context-rich detections that enable rapid threat containment.\n\nDesired skills and qualifications\nDegree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.\n\nProven track record in developing use cases and detection logic within a Security Operations Center (SOC) environment, including leadership or mentorship experience.\n\nStrong proficiency in Python and hands-on experience with automation frameworks to streamline operations.\n\nDeep technical expertise in Windows and Linux operating systems, including OS internals, system logging, and telemetry analysis.\n\nPractical background in Red Teaming, Penetration Testing, or an offensive mindset to anticipate attacker methodologies.\n\nAdvanced expertise with the MITRE ATT&CK® framework and Detection-as-Code concepts.\n\nStrong communication skills with an empathetic, collaborative approach to leading cross-functional teams and technical initiatives.\n\nNot a 100% match? No worries! Airbus supports your personal growth with customized development solutions.\nTake your career to a new level and apply online now!\nThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.\nCompany:\nAirbus Defence and Space GmbHEmployment Type:\nPermanent-------\nExperience Level:\nProfessionalJob Family:\nCyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.\nAirbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.\nAirbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to .\nAt Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.","description_format":"text","description_chars":5406,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Cafeteria","Flexible schedule","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Earth Observation","Combat Aircraft","Defense Manufacturing","Avionics & Flight Control"],"lifecycle":[{"event":"open","at":"2026-08-31T15:35:48Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.497,"p_room":0.28,"age_days":62,"expected_fill_days":27,"reasons":["conf:9","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/airbus-cyber-detection-engineering-lead-dfm","json_url":"https://alion.io/job/airbus-cyber-detection-engineering-lead-dfm.json","meta":{"generated_at":"2026-11-02T09:52:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13776,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3100},"rest":"https://alion.io/mcp/rest/get_company?id=3100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fairbus-cyber-detection-engineering-lead-dfm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fairbus-cyber-detection-engineering-lead-dfm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fairbus-cyber-detection-engineering-lead-dfm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/airbus-cyber-detection-engineering-lead-dfm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fairbus-cyber-detection-engineering-lead-dfm"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":180323}},{"tool":"search_jobs","arguments":{"company":"airbus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":180323},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}