Airbus Hiring Vulnerability Management Analyst (Bangalore) | Cybersecurity

Program Overview

The Volunteer for International Experience (VIE) program is an international initiative supported by the French Ministries of Europe and Foreign Affairs, Economy and Finance, and Ecological Transition. Through this program, Airbus offers young professionals the chance to gain paid international experience in technical or business roles.

The VIE contract follows Business France eligibility criteria and typically runs between 6 and 24 months.

About the Role

This position is based in the Bangalore area and is part of the Airbus Corporate Security organization supporting the India and South Asia region. The region includes India, Bangladesh, Nepal, Bhutan, Sri Lanka, and Maldives, with major Airbus offices located in Bangalore and New Delhi.

You will work with the Corporate Security team and report to the Regional Chief Information Security Officer (CISO). The role involves collaborating with cybersecurity, IT/OT, and industry professionals across the region while helping maintain an effective network of security stakeholders.

Key Responsibilities

• Quantitative Risk Modeling: Conduct Monte Carlo simulations to estimate Annual Loss Expectancy and apply Bayesian inference to update risk probabilities using vulnerability telemetry and external evidence.
• Vulnerability Lifecycle Management: Collect and track vulnerabilities within a centralized platform and map them to the corporate security risk register across divisions.
• Risk Analysis: Perform multi-dimensional analysis to prioritize vulnerabilities using threat intelligence, vulnerability intelligence, and incident response data.
• Process Optimization: Improve vulnerability management workflows to reduce Mean Time to Remediate (MTTR).
• Governance Support: Assist the Security Governance team with remediation follow-ups and monitor overall risk posture, escalating risks that exceed the organization’s tolerance.
• Control Analysis: Apply linear regression models to correlate vulnerability metrics such as patch latency with operational downtime and financial impact.
• Automation and Reporting: Use AI prompt engineering techniques along with Python or SQL to automate KRI and KPI generation and interpret statistical outputs for executive reporting.

Required Profile

Candidates should hold a master’s degree or equivalent in Information Technology or Industrial Management. A strong interest in cybersecurity, vulnerability management, or quantitative risk analysis is expected.

The role requires knowledge of probability distributions such as lognormal, Poisson, and beta, along with statistical concepts including p-values and R-squared. Proficiency in Python or R for data modeling and SQL for querying security telemetry is required.

Applicants should understand the vulnerability management lifecycle, prioritization frameworks such as CVSS or EPSS, and common technical control failure scenarios. A good level of English is mandatory, and additional languages are considered an advantage.

Preferred Skills

• Familiarity with FAIR (Factor Analysis of Information Risk)
• Experience working with cloud security controls in AWS, Azure, or GCP
• Relevant certifications such as CRISC, CISM, or CISSP

Airbus promotes an inclusive working environment and encourages applicants who meet most of the requirements and are motivated to develop additional skills during the role.