Airbus Vulnerability Management Analyst Job - Bangalore

Program Overview

The Volunteer for International Experience (VIE) program is an international initiative sponsored by French ministries including the Ministry of Europe and Foreign Affairs and the Ministry of Economy and Finance. It enables young professionals to gain paid work experience abroad in technical or business roles.

This opportunity is offered by Airbus for early career professionals seeking international exposure. The VIE contract is governed by Business France eligibility rules and typically runs for a duration of 6 to 24 months.

About the Role

This position is based in Bangalore and is part of the Airbus Corporate Security organization for the India and South Asia region. The role reports to the Regional Chief Information Security Officer (CISO).

You will work with cybersecurity, IT and industry professionals across India and South Asia. The role requires collaboration with multiple stakeholders while supporting security initiatives in a hybrid work environment.

About the Region

The India and South Asia region includes India, Bangladesh, Nepal, Bhutan, Sri Lanka and the Maldives. Airbus offices are located in Bangalore and New Delhi, supporting engineering, information management, customer services and functions such as HR, finance, procurement and security.

Key Responsibilities

• Perform quantitative risk modeling using Monte Carlo simulations to calculate Annual Loss Expectancy (ALE) and apply Bayesian inference to update risk probabilities.
• Track and manage vulnerabilities within a centralized platform, aligning them with the corporate security risk register across divisions.
• Conduct multi dimensional analysis to prioritize vulnerabilities using threat intelligence, vulnerability intelligence and incident response data.
• Improve vulnerability management processes to reduce Mean Time to Remediate (MTTR).
• Support the Security Governance department with remediation follow ups and monitor organizational risk posture.
• Escalate major security risks that exceed the company risk tolerance.
• Analyze relationships between vulnerability metrics and business impact using linear regression techniques.
• Use AI prompt engineering with Python and SQL to automate KPI and KRI generation and interpret statistical outputs for executive reporting.

Required Profile

A Master’s degree or equivalent in Information Technology or Industrial Management is required. Candidates should demonstrate interest in cybersecurity and risk analysis along with strong analytical capability.

Experience or knowledge in cybersecurity, vulnerability management or quantitative risk analysis is expected. Proficiency in Python or R for data modeling and SQL for querying security telemetry is required.

Understanding of probability distributions such as Lognormal, Poisson and Beta, as well as statistical significance measures like p values and R squared is beneficial. Familiarity with vulnerability prioritization frameworks such as CVSS and EPSS is also important.

Nice to Have

• Knowledge of FAIR (Factor Analysis of Information Risk) framework.
• Experience managing security controls in cloud platforms such as AWS, Azure or GCP.
• Professional certifications such as CRISC, CISM or CISSP.

Airbus promotes diversity and equal opportunities and encourages applications from candidates with varied backgrounds. If you meet most of the required skills and are motivated to develop further, you are encouraged to apply.