Security Engineer - (F / M)

Created in 2009, ESSP is a young and dynamic company, a pan European service provider, certified by EASA (the European Union Aviation Safety Agency) to deliver safety-critical services. Our mission is to operate and provide Communication, Navigation and Surveillance (CNS) services, among which, the main one is, the EGNOS service (the European Geostationary Navigation Overlay Service), on behalf of the EUSPA (the European Agency for Space).

We are looking for a Security Engineer who will be in charge of overseeing security activities in support of ESSP activities and services delivered to ESSP Customers. His / her role should make the link between security and operational cybersecurity needs.

For these activities, we are looking for someone with at least 3 to 5 years’ experience in cybersecurity and IT network / information systems, with a very good level of English (B2-C1).

Your main responsibilities / activities will be : Review and confront information systems architectures in terms of cybersecurity,

Propose and implement technical security functions and solutions, contributes to security projects,

Support and manage ESSP’s internal administrative and project management process,

Support security compliance activities to standards and regulations,

Support security activities to be performed in Madrid interfacing with Toulouse team,

Follow ESSP process for security deliverables (security, quality, delivery and so forth),

Contribute to accreditations of activities (products, facilities, etc),

Coordinate subcontractors for the accomplishment of security-related activities, and various teams involved in security activities,

Provide technical expertise in support of company’s operational units,

Ensure reviews and validate within the framework of the company's processes (changes, anomalies, deviations, etc.),

Manage vulnerability process along the lifecycle,

Contribute to Business Continuity Plan and Crisis Management on security aspects,

Provide expertise to the benefit of ESSP, for example by participating to call for tenders,

Participate in the analysis of security events and lead the implementation of mitigation and remediation actions on products and solutions,

Contribute to the company's and clients' security reporting,

Support audit activities along project lifecycle

Upon request, lead or contribute to the security risk management.

Lead technical and project management meetings on behalf of the Security Department

The Security Engineer contributes to the continuous improvement of company security policies and cybersecurity practices, specifically in the context of the ESSP ISO 27001 certified ISMS (Information Security Management System) and Security Management System (Sec-MS) supporting the ESSP ANSP (Air Navigation Service Provider) Certificate.

The Security Engineer is also a point of contact for the ESSP’s Security Office (Security Officers) when needed.

Consequently he / she contributes to :

Promoting good cybersecurity practices to the personnel,

Improving company processes and tools for security management,

Developing new security services, notably in terms of operational security and cybersecurity,

Designing, building, assessing, and managing innovating technical projects for internal or external projects

Initiate a security watch, both technological and regulatory.

Profile : Generic Skills :

Be able to : Understand, analyse, and reformulate users / customers / projects’ needs and requirements, Define and write technical documentation; have editorial capabilities,

Act as consultant and facilitate the decision-making process,

Evaluate the impacts of technologies and solutions on information systems and operations.

Draft hight-quality documentation

Communicate a clear status on on-going actions

Lead meetings

Autonomy with strong teamwork capability

Teaching capabilities and good communication skills

Rigorous, organized, ability to be pragmatic and discreet

Project management capabilities

Curiosity and ability to self-learning

Language skills : High English Level (B2-C1) – CECRL,

French will be appreciated,

Good knowledge of MS Office (Word, Excel, PowerPoint, Project and Visio).

Specific Skills :

Good knowledge of technical IT security (information systems, network, physical security, crypto) and cybersecurity related activities (threats, exploits, vulnerabilities, patches, configuration, rules …)

Knowledge of security risk analysis methodology (ISO27005, EBIOS RM, HLSS …)

Good practical knowledge of enterprise IT and security organization aspects (ISMS, ISSP, etc.),

Practical knowledge of project management processes and reporting,

Knowledge of critical systems and associated constraints (aerospace, industry, etc.).

Awareness on GNSS and communication technologies,

Knowledge of applicable country defence and European related regulations.

Job Requirements : Available for occasional travels mainly in Europe

Experience of mission critical systems, in aerospace and / or industrial context.

Experience in projects in an international context (European).

Cybersecurity specific certifications for process or products will be appreciated

Human Resources information :

• 1st interview is held by the direct manager of the position you applied for (technical interview)
• 2nd interview is held by HR department

Element of package of remuneration :

Please send your application file only by e-mail to the following address :

Job Location : Madrid (Spain)

Type of Contract : Full time - Permanent Contract

ESSP is committed to cultural diversity, gender equality and the employment of disabled workers.

Do you want to load external content supplied by Twitter?

#J-18808-Ljbffr