Aircraft Security Architect

Description

The team is hiring a cyber security architect for the product security team in the engineering organisation of a defence and space business in Getafe, Madrid.

The role protects the company's products and supporting services against cyber threats across their whole life, from early research and definition through development, manufacturing, operation and support to end of life and disposal.

The work takes place in an international setting where cyber security is an increasingly central concern for every product the business designs and builds.

The ideal candidate is an engineer with hands-on experience in risk analysis methods, security architecture design, and infrastructure or secure development, and a strong interest in cyber security.

The role is a permanent position at professional level in the cyber security job family.

Responsibilities

• Define product security requirements and oversee their design, implementation, integration, testing, verification and compliance.
• Drive the design of product security architectures from security risk assessments, using methods such as MAGERIT, PILAR, NIST, EBIOS, EUROCAE ED202A and ED203A, and decide which security controls apply and where in the product architecture.
• Help make products secure by design and meet security requirements under applicable national and international regulations.
• Work closely with customers, programme managers, chief engineers and other stakeholders to reach product security milestones for each programme.
• Lead security across each product's full lifecycle and act as the product security focal point for your domain.
• Give cyber security advice to business projects and promote a security-by-design approach with project stakeholders.
• Contribute to solution architecture and design to identify and reduce risk.
• Carry out security risk assessments, including threat and vulnerability assessments, and define the requirements that mitigate the identified risks.
• Design security architectures that meet those requirements, then break the high-level design into detailed low-level designs for each subsystem or component.
• Ensure products comply with national and international security regulations and the applicable criteria and methods, such as CC/CEM, ITSEC/ITSEM and CCN-STICs.
• Lead the definition, development and rollout of security operating procedures to keep products secure throughout their life.
• Meet customers and lead them through the company's product security approach.
• Take part in the company international working groups.
• Keep clear, accurate reports on your work.

Requirements

• Strong interpersonal and leadership skills, with clear written and spoken communication.
• A highly innovative outlook that questions existing practice.
• Enthusiasm for aircraft, security and technology, and a real interest in engineering.
• Willingness to keep learning in a changing environment.
• Able to work with a high level of detail and confidentiality.
• Able to work independently and within a team, and across international teams.
• Strong customer focus and drive to get results.
• A bachelor's or master's degree in telecommunications engineering, aeronautical engineering or computer science.
• At least 3 years of experience in information security, aircraft systems design and development, or aircraft safety.
• Experience with threat and risk analysis methods and tools, such as MAGERIT, PILAR, NIST, EBIOS and EUROCAE ED203A.
• Strong knowledge of designing systems and application security architectures.
• Strong knowledge of network and application security architecture and operating systems.
• Ability to secure systems at both application and infrastructure level, including hardening.
• Experience with functional security testing and penetration or refutation testing.
• Able to adapt to new regulations, methods and environments such as aircraft systems.
• Able to write clear, usable security documentation.
• Advanced English.
• Good French or German is an advantage but not required.

Conditions

Flexible working hours, with an option for a continuous schedule from May to September.

Hybrid working where possible.

The role requires a NATO or national security clearance, to be obtained in line with business needs.

Occasional business travel is part of the role.

The role requires awareness of compliance risks and a commitment to act with integrity.

Permanent contract, based in Getafe (Madrid).

Benefits

• Vacation days plus extra days off during the year, totalling 35 working days off.
• Competitive salary and an additional bonus.
• Collective transport in some sites.
• Health insurance, employee stock options, a retirement plan and study grants.
• On-site facilities including a free canteen, a kindergarten and a medical office.
• Opportunities to join social and corporate responsibility initiatives.
• Upskilling opportunities and development prospects in a multicultural environment.
• Discounts on a wide range of products and other perks.
• Equal opportunity: applications are welcome regardless of background, age, gender, disability, sexual orientation or religious belief.