Security Engineer - Accreditation - IRIS2

Minimum requirements

• Bachelor's or Master's Degree in Telecommunications Engineering, Network Engineering, Cybersecurity Engineering or a related field.
• At least 5 years of experience in cybersecurity engineering, including accreditation activities or secure encryption, preferably in the satellite-communications domain.
• Proven experience working with institutional customers or national governmental institutions, particularly in security risk management, security threats and incidents, security vulnerabilities and malware analysis.
• Sound knowledge of security technologies, including encryption, secure Authentication, Authorisation and Accounting, Key Management Facilities, Security Information and Event Management, and Security Orchestration, Automation and Response.
• Sound knowledge of ISO/IEC 27000-series security standards and ECSS.
• Security-engineering experience in programmes covering flight and ground infrastructure, including on-board cryptographic units, secure SIMs, TM/TC encryption, satellite control centres, IT and data centres, 5G systems, OSS/BSS and terrestrial fixed and mobile networks.
• Knowledge of space security standards, particularly ECSS and CCSDS.
• Experience working with European institutions, including EUSPA, the European Commission and ESA, or equivalent organisations, in secure environments for European space projects.
• Nationality of an EU Member State and willingness to undergo an EU Secret clearance process.

• Experience working within the European regulatory environment for cybersecurity and accreditation is considered an asset.
• Possession of an EU security clearance is considered an asset.
• Fluency in English, both written and spoken; any other European language is considered an asset.

Hispasat, as part of the SpaceRISE consortium, is responsible for the technical implementation and ensuring the success of the IRIS² project, leveraging its extensive experience in satellite communications. This collaboration is essential to provide secure and reliable high-performance communication solutions to the European Union and its member states.

To be part of this project, we are looking for Security Engineer - Accreditation. The responsibilities of the position are as follows:

Responsibilities

• Review functional and contractual documentation related to flight and ground architectural diagrams, requirement lists and Statements of Work.
• Analyse documentation from cybersecurity and information-protection perspectives, identify relevant requirements and contribute to its finalisation as appropriate.
• Plan, prepare and support accreditation activities for Flight and Ground Segment systems in compliance with applicable security and regulatory standards.
• Support the project team on security requirement-compliance analysis, implications for infrastructure implementation, identification of security flaws and vulnerabilities, and verification and validation activities.
• Follow system integration, testing, verification and validation, assess compliance with security accreditation requirements and propose treatment plans.
• Develop and maintain accreditation documentation, including Security Risk Assessments, Security Operating Procedures and accreditation evidence packages.
• Coordinate with accreditation authorities, cybersecurity teams, system engineering and operational stakeholders throughout the accreditation lifecycle, from design to operations.
• Apply security frameworks, risk-management methodologies and accreditation processes applicable to space programmes, including the handling of Classified Information where required.
• Support cybersecurity audits and regular system security upgrades to achieve accreditation and maintain the required security levels.
• Identify, track and resolve accreditation findings, ensuring that security requirements are implemented and maintained throughout system operations.
• Review, analyse and update security documentation together with the project team and external stakeholders.
• Contribute to the specification and review of implementation plans for operational sites from cybersecurity and information-protection perspectives.
• Own or contribute to the preparation and closure of institutional contract milestone reviews, including ESA and European Commission reviews.
• Support security accreditation and compliance activities for European space programmes, such as ESA, GOVSATCOM, Galileo and Copernicus, including the preparation of evidence for security audits and accreditation reviews.
• Report to the Programme Manager.

Location

• Arganda del Rey, Madrid, Spain.