Security Engineer - Cybersecurity - IRIS2

Minimum requirements

• Bachelor's or Master's Degree in Telecommunications Engineering, Network Engineering, Cybersecurity Engineering or a related field.
• At least 5 years of experience in cybersecurity engineering activities or secure encryption, preferably in the satellite-communications domain.
• Proven experience working with institutional customers or national governmental institutions, particularly in security risk management, security threats and incidents, security vulnerabilities and malware analysis.
• Sound knowledge of security technologies, including encryption, secure Authentication, Authorisation and Accounting, Key Management Facilities, Security Information and Event Management, and Security Orchestration, Automation and Response.
• Sound knowledge of ISO/IEC 27000-series security standards and ECSS.
• Security-engineering experience in programmes covering flight and ground infrastructure, including on-board cryptographic units, secure SIMs, TM/TC encryption, satellite control centres, IT and data centres, 5G systems, OSS/BSS and terrestrial fixed and mobile networks.
• Knowledge of space security standards, particularly ECSS and CCSDS.
• Experience working with European institutions, including EUSPA, the European Commission and ESA, or equivalent organisations, in secure environments for European space projects.
• Experience working within the European regulatory environment for cybersecurity and accreditation is considered an asset.
• Nationality of an EU Member State and willingness to undergo an EU Secret clearance process.
• Possession of an EU security clearance is considered an asset.
• Fluency in English, both written and spoken; any other European language is considered an asset.

Hispasat, as part of the SpaceRISE consortium, is responsible for the technical implementation and ensuring the success of the IRIS² project, leveraging its extensive experience in satellite communications. This collaboration is essential to provide secure and reliable high-performance communication solutions to the European Union and its member states.

To be part of this project, we are looking for Security Engineer - Cybersecurity. The responsibilities of the position are as follows:

Responsibilities

• Review functional and contractual documentation related to flight and ground architectural diagrams, requirement lists and Statements of Work.
• Analyse documentation from cybersecurity and information-protection perspectives, identify relevant requirements and contribute to its finalisation as appropriate.
• Tailor general security requirements and flow them down to interfaces and subsystems.
• Design, analyse and perform trade-offs on security architecture choices, with a focus on encryption technologies, Key Management Facilities and key distribution, together with their procurement and deployment, pursuing cost- and time-efficient accreditation.
• Support the project team on security requirement-compliance analysis, implications for infrastructure implementation, identification of security flaws and vulnerabilities, and verification and validation activities.
• Follow system integration, testing, verification and validation, assess compliance with security requirements and propose treatment plans.
• Analyse the exploitability and impact of vulnerabilities and propose appropriate mitigations and countermeasures.
• Conduct authorised hands-on penetration tests to identify security flaws.
• Support cybersecurity audits and the regular security upgrades required for the system.
• Support the development and maintenance of technical documents, including the Security Management Plan, end-to-end space-system security architecture, security design and corresponding security requirements.
• Review, analyse and update security documentation together with the project team and external stakeholders.
• Contribute to the specification and review of implementation plans for operational sites from cybersecurity and information-protection perspectives.
• Participate in the follow-up of the procurement and implementation of industrial contracts, technology developments, laboratory tools and equipment.
• Foster new security application areas for multidisciplinary activities, emphasising innovative concepts, cutting-edge technologies and system architectures in collaboration with European New Space companies.
• Own or contribute to the preparation and closure of institutional contract milestone reviews, including ESA and European Commission reviews.
• Report to the Programme Manager.

Location

• Arganda del Rey, Madrid, Spain.