Cyber Security Engineer

Cyber Security Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality. The System Security Section is responsible for the end-to-end system security engineering of the Agency’s missions, projects and activities in the space, ground and user segments and communication links, as well as at system, subsystem, element and equipment level. It covers the missions from the study phase to the definition of requirements, design, development, security integration/verification and security service preparation, across the full stack, from the physical to the application layer. To serve these functions, the System Security Section defines and executes the associated technology research and development (R&D) and studies, as well as the required security engineering standards. Using security laboratory facilities, the System Security Section performs vulnerability assessments at all levels of its responsibility, proposing detection methods and mitigation and protection measures using security assessment tools and equipment. In this position, you will support ESA directorates and space projects and systems, reporting functionally to the corresponding space project/system management structure., Your tasks and responsibilities will include:

• participating in programme reviews of projects, assessing the security design, implementation, qualification and validation, to ensure development is in line with relevant
• programme cyber security requirements;
• reviewing the design, proposed implementation and technologies, identifying potential vulnerabilities, analysing their exploitability and their impact, and proposing the appropriate mitigations and required countermeasures;
• conducting authorised hands-on penetration tests, leading a pen testing team, to identify security flaws;
• recommending remedial actions to strengthen defences;
• providing recommendations on security best practices;
• following the implementation of the mitigation actions, either internally or with industry/partners;
• reviewing and assessing the acceptability of cyber requests for waivers from industry;
• organising vulnerability assessment and penetration testing campaigns, assessing the findings, proposing mitigations, and analysing collected evidence of fixed and mitigated vulnerabilities;
• fostering new security application areas for multidisciplinary activities, placing emphasis on innovative concepts, cutting-edge technologies and system architectures in the field of cyber security;
• proposing and supervising/following, as a technical officer, research and development activities in the area of security for space systems and missions;
• supporting laboratory activities as required;
• continuously following technological trends and evolutions in the scientific fields relevant for this position, and in particular the latest emerging threats, exploits and industry trends deployed to keep ahead of attackers., ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, religious beliefs, age, disability or other characteristics. At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process. If you would like to discuss this further, please contact us via email at . In principle, recruitment will be within the advertised grade band (A2-A4). However, if the selected candidate has less than four years of relevant professional experience following the completion of the master’s degree, the position may be filled at A1 level. Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations & eligible to acquire the security clearance by their national security administrations. During the recruitment process, the Agency may request applicants to undergo selection tests. Additionally, successful candidates will need to undergo basic screening before appointment, which will be conducted by an external background screening service, in compliance with the European Space Agency’s security procedures. Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position. The information published on ESA’s careers website regarding working conditions is correct at the time of publication.

ARES - (Association of Retired ESA Staff in Nederland). alle vacatures van dit bedrijf

Familiarity with tools like Metasploit, Nmap, Nessus, Burp Suite and Wireshark, as well as with fuzzing tools General background and specific experience in the technical domains covered by the position Deep understanding of Linux, Windows, real-time OS, Active Directory/LDAP and other IT enterprise software Proficiency in scripting languages such as Python Very good knowledge of security frameworks like OWASP Understanding of related technologies, R&D trends and the industrial landscape Behavioural competencies Result Orientation Operational Efficiency Fostering Cooperation Relationship Management Continuous Improvement Forward Thinking Education A master’s degree in computer science and/or cyber security is required for this post.