System Security Engineer

This role is for a System Security Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality.

The System Security Section is responsible for the end-to-end system security engineering of the Agency’s missions, projects, and activities, in space, ground, user segments and communication links, at system, subsystem, element and equipment level. It covers the missions from study phase to definition of requirements, design, development, security integration/verification, and security service preparation, across the full stack, from physical to application layer. The System Security Section provides functional support to ESA missions and projects in the area of end-to-end security engineering and cyber security. To serve these functions, it also defines and executes the associated technology research and developments (R&D) and studies.

This position supports the European Quantum Communication Infrastructure (EuroQCI), entrusted to ESA by the European Commission, and the ESA Secure And cryptoGrAphic (SAGA) mission projects in the Directorate of Connectivity and Secure Communication (CSC). The SAGA project aims to develop and deploy the EuroQCI first-generation space component (space and related ground/user segment) for preliminary QKD service validation.

As a System Security Engineer for EuroQCI and SAGA, you will be part of the projects’ core teams and work closely with the CSC Security Office. You will hold lead technical responsibilities for the security baseline and implementation of the projects. Your role will cover all areas of security engineering, information security and cyber security across terrestrial and space environments. You will be responsible for integrating security engineering in the development of both EuroQCI and SAGA in close coordination with the EuroQCI end-to-end System Security Engineer, the ESA Security Office (ESO), other relevant ESA Directorates and industrial partners. You will also be responsible for developing a long-term relationship with industry partners by fostering reliable technical collaboration and steering innovation developments and digitalisation procurement.

Duties

Your tasks and responsibilities will include:

• Being responsible for all security engineering activities for SAGA/EuroQCI in all phases of the project.
• Participating in programme reviews of the projects, assessing and being responsible for the security design, implementation, qualification and validation of systems at system level (including ground, space, user segment and communication links), to ensure development is in line with the relevant programme security requirements.
• Being responsible for the end-to-end system security architecture and implementation of the corresponding security requirements of EuroQCI and SAGA.
• Being responsible for the development and maintenance of various technical documents (security requirements, security management plans, etc.).
• Leading the SAGA/EuroQCI Security Engineering team as a security design authority.
• Being responsible for and coordinating the SAGA/EuroQCI security risk assessment with the ESA Security Office (ESO).
• Coordinating with the product assurance, system and payload leads during development, integration and testing activities for the resolution of potential deviations.
• Serving as the technical interface for designing, supporting and maintaining SAGA/EuroQCI cyber security processes and procedures, in cooperation with the ESA Security Office.
• Defining and maintaining the SAGA/EuroQCI cyber security policy.
• Acting as the technical focal point within the team on SAGA/EuroQCI cyber and security matters, applying standard security techniques and architectures to mitigate security risks.
• Providing regular reporting to project management, identifying technical and security risk areas, proposing and monitoring mitigation measures.
• Contributing to the management of the schedule and proposing schedule risk mitigation actions within your area of responsibility.
• Monitoring the industrial preparation for in-orbit QKD in-flight spacecraft commissioning and service provision in collaboration with project and other teams, as necessary.
• Defining and validating the end-to-end security baseline, applicable to large-scale ground infrastructure (including fibre optic distributed interconnected systems), ground-to-space and space-to-space.
• Coordinating with ESO in the preparation of the certification and accreditation dossier.
• Fostering new security application areas for multidisciplinary activities, placing emphasis on innovative concepts, cutting-edge technologies and system architectures in the field of space security engineering.
• Proposing and supervising/monitoring as a Technical Officer research and development (R&D) activities in the area of security for space systems and missions.
• Continuously following technological trends and evolutions in the scientific fields relevant for this position.

Technical competencies

• Very good knowledge of security threats against space missions and corresponding mitigations
• Knowledge of modern applied cryptography
• Good knowledge of security standards, hardening guidelines and security best practices
• Deep knowledge of security engineering for communications systems based on RF and quantum key distribution
• Good knowledge of space system engineering, including ESA and/or industrial development, verification and procurement processes
• Knowledge of complex project risk management processes and security assessments
• Knowledge or experience in securing wide-area network infrastructures (including familiarity with fibre-optic technologies)
• Previous project experience and/or knowledge of quantum communications would be a distinct asset
• Knowledge of network and satellite communications security

Behavioural competencies

• Result Orientation
• Operational Efficiency
• Fostering Cooperation
• Relationship Management
• Continuous Improvement
• Forward Thinking

Education

A master's in aerospace engineering, or cyber security, or telecommunications engineering or other relevant engineering discipline is required for this post.

Important Information and Disclaimer

Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations and eligible to acquire the security clearance by their national security administrations.

Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

Nationality and Languages

Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, Sweden, Switzerland, the United Kingdom and Canada, Latvia, Lithuania and Slovakia.

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.

*Member States, Associate Members or Cooperating States.