> Markdown version of [/jobs/ext/3294385-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/3294385-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Engineer - **Company:** SSC Group GmbH - **Location:** Darmstadt, Germany - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software System Penetration Testing, User Authentication, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Key Management, Scrum Methodology, Software Engineering, Software Vulnerability Management, Data Logging, Containerization, Information Technology, Devsecops, Docker - **Published:** September 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=289f61e3ebeb01eb ## About the Role * Master's degree in Cyber Security, Computer Science, Software Engineering, Information Security, or a related field. * More than 3-5 years of experience in cybersecurity, information security, or security engineering. * Experience with cybersecurity compliance frameworks and standards. * Strong understanding of: + NIS2 Directive + Cyber Resilience Act (CRA) + ISO 27001 + Security risk management + Business continuity and resilience concepts * Experience with secure software development and DevSecOps practices. * Knowledge of cloud platforms and SaaS architectures. * Familiarity with vulnerability management, threat modelling, and incident response. * Ability to translate regulatory requirements into practical technical and organizational measures. * Strong analytical, documentation, and communication skills. * Fluency in English * The following additional qualifications are an advantage: + Experience in the Space Industry + Understanding of latest technological advancements in the field of Artificial Intelligence + Knowledge of containerization technologies such as Docker + Knowledge of the Software Development Lifecycle + Previous experience working in a Scrum Team ## Description Welcome to SSC Space - the perfect workplace for those passionate about technology in general and space in particular. With space organizations, research institutes, institutional and commercial actors as customers, we offer specialist expertise in satellite communications, space consulting services, rocket and balloon systems, flight test services, satellite propulsion systems, and much more. SSC also has one of the world's largest global networks of ground stations for satellite communications. We own and operate the Esrange Space Center in Kiruna, northern Sweden, with the aim of launching satellites in the near future. Are you fueled by a passion for people and the ambition to create an awesome workplace? Are you ready to embark on an exciting journey with us to help earth benefit from space? If you answered yes to the question, we invite you to seize the opportunity to make a significant impact as a Cyber Security Engineer. We are looking for a dedicated person who shares our core values of Customer passion, Care, Collaboration, Curiosity, and Courage. Security: In line with security requirements for the concerned missions of this position, the candidate has to hold a European citizenship. Evidence of eligibility will be required from candidates as part of the recruitment process. Furthermore, in view of the nature of the work the company is in, all potential employees will undergo stringent reference and identity checks., * NIS2 & CRA Compliance Program + Lead the implementation of cybersecurity measures required under NIS2 and the Cyber Resilience Act (CRA). + Perform gap analyses against regulatory requirements and develop implementation roadmaps. + Define and maintain security policies, procedures, standards, and governance processes. + Support Business Continuity Management (BCM), risk assessments, and Business Impact Analysis (BIA). + Maintain security incident management and reporting processes. + Develop and maintain risk registers and mitigation plans. + Coordinate cybersecurity audits, assessments, and compliance reviews. + Support supplier and third-party security evaluations. + Prepare evidence and documentation required for regulatory compliance and audits. + Deliver cybersecurity awareness and training initiatives across the organization. * SaaS Product Cyber Resilience + Define and implement security architecture for SaaS solutions. + Establish secure software development lifecycle practices. + Conduct threat modelling, security risk assessments, and security design reviews. + Define product security requirements aligned with CRA and industry best practices. + Coordinate vulnerability management activities, including scanning, remediation, and disclosure processes. + Support penetration testing and security validation activities. * Ensure implementation of security controls covering: + Identity and access management + Authentication and authorization + Encryption and key management + Logging, monitoring, and incident detection + Backup and recovery + Software supply chain security + Secure cloud infrastructure * Define and monitor cybersecurity KPIs and resilience metrics. * Support product certification and customer security assessments when required. * Security Operations & Continuous Improvement + Monitor emerging cyber threats and regulatory developments. + Develop response plans and support incident investigations. + Contribute to continuous improvement of cybersecurity processes and tools. + Collaborate with development teams to integrate security-by-design and security-by-default principles. + Support security reporting to management and relevant stakeholders. ## Related Videos - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)