Cyber Security Architect (d/f/m)

Description

The Defence and Strategic Programmes team in the company's Cybersecurity unit in Spain has an opening for a Cyber Security Architect.

The team builds products and provides development, concept work and cybersecurity engineering to internal and external clients. As a European specialist, the company protects customers, government agencies and critical infrastructure from cyber threats.

The team wants someone with solid experience in defence and aerospace.

Responsibilities

• Govern product security across the full product lifecycle.
• Help define secure architectures for air and ground segments.
• Manage security requirements at levels L1, L2 and L3 in DOORS.
• Model security architecture in Cameo.
• Write technical security documents such as architecture papers, cryptographic documents, review items and ad-hoc SRAs.
• Advise design organisations on cyber requirements when talking with suppliers.
• Provide technical input to panels with the authority and customer, including the CISSWG and COMSEC panels.
• Help define key management across generation, transport, storage and erasure, plus certificate management processes.
• Carry out security risk assessments, including threat and vulnerability evaluation.
• Propose architectures and designs that meet requirements, and check security requirements in solutions from system designers.
• Run formal assessment, certification and accreditation under national and international rules such as CC/CEM and ITSEC.
• Act as expert support to system designers and contribute to R&D+I projects.
• Monitor cyber vulnerabilities and analyse their impact to identify mitigation measures.
• Meet occupational risk prevention, quality and environmental duties: follow health and safety rules and procedures, complete ORP training, wear PPE correctly, report unsafe conditions, meet quality standards, help improve the quality system, keep accurate records, take part in quality audits, support sustainability efforts such as resource efficiency and waste reduction, and report environmental incidents.

Requirements

• Bachelor's or Master's degree in telecommunications engineering, aerospace engineering or computer science.
• Able to obtain and keep a National or NATO security clearance.
• Advanced knowledge of Common Criteria (ISO/IEC 15408), ITSEC or airworthiness rules DO-326A/ED-202A.
• English at C1 level for technical and business communication.
• Hands-on experience with security risk assessment methodologies.
• Able to harden network devices and operating systems.
• Skilled with vulnerability monitoring tools.
• Able to write clear, usable technical documentation.
• At least 2-4 years working in information security or on aircraft systems.
• Design security solutions that keep aeronautical systems operating efficiently.
• Extreme precision in technical documents and accreditation work.
• Break down complex threats and find attack paths in unusual environments.
• Advise system designers as an expert, weighing security against functionality.
• Stay proactive on the global threat landscape, including cyber threat intelligence for the sector.
• Discretion and integrity when handling sensitive and classified information.
• Work under pressure on critical certifications with strict deadlines.
• Work well in multidisciplinary teams with systems engineering, R&D and test flight staff.
• Spot small vulnerabilities or configuration flaws that could become critical risks.
• Stay aware of compliance risks and act with integrity.
• Asset: knowledge of TRANSEC/COMSEC.
• Asset: knowledge of the CIS accreditation process.
• Asset: knowledge of NATO standards.

Conditions

Permanent contract.

Based in Spain.

Professional experience level.

Flexible working arrangements where possible.

Follow the company's policies, codes and standards at group and unit level, and understand your information security, privacy and confidentiality duties.

Take part in training and updates on policies relevant to your role, and act with due diligence to prevent security incidents. Any investigation or disciplinary process starts only after an incident is verified.

The company welcomes applications regardless of background, age, gender, disability, sexual orientation or religious belief.