System Security Engineer (2 Posts)

This vacancy is for a System Security Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality.

This vacancy is published to recruit for either: an appointment of 4 years, extendable to an indefinite duration; or a fixed-term appointment with an initial duration of 4 years that, depending on performance and organisational needs, may be extended up to a maximum total duration of 8 years.

Description

System Security Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality.

The System Security Section is responsible for the end-to-end system security engineering of the Agency’s missions, projects and activities relating to the space, ground and user segments and communication links, at system, subsystem, element and equipment level. It covers the missions from the study phase to the definition of requirements, design, development, security integration and verification, and security service preparation, across the full stack, from the physical to the application layer.

To serve these functions, the System Security Section defines and executes the associated technology research and development (R&D) and studies, as well as the required security engineering standards. Using security laboratory facilities, the System Security Section performs vulnerability assessments at all levels of its responsibility, proposing detection methods and mitigation and protection measures using security assessment tools and equipment.

The System Security Section provides functional support to ESA missions and projects in the area of end-to-end system security engineering and cyber security.

Duties

Your tasks and responsibilities will include:

• participating in programme reviews, assessing the security design, development, implementation, qualification and validation of space systems at system level, including the ground, space and user segments and communication links, to ensure compliance with programme security requirements and relevant standards;
• supporting the development and maintenance of various technical documents, such as the security management plan, the end-to-end space system security architecture, the security design and corresponding security requirements;
• contributing to the security risk assessment of programmes at system level under the coordination of the ESA Security Office (security assurance function);
• analysing and assessing security-related requests for deviations and waivers for space systems and recommending a way forward;
• assessing the proposed implementations and space technologies from a security perspective, identifying potential vulnerabilities, analysing their exploitability and their impact, and proposing the appropriate mitigations and required countermeasures;
• coordinating the security risk, the vulnerability assessment and the threat analysis with the ESA Security Office in order to follow up the related design and development implementation;
• following the implementation of mitigation actions, either internally or with industry/partners;
• supporting the projects and the ESA Security Office (security assurance function) in the preparation of the security accreditation/certification data package as needed;
• following system integration, testing, verification and validation, assessing compliance with the security requirements and proposing treatment plans;
• fostering new security application areas for multidisciplinary activities, placing emphasis on innovative concepts, cutting-edge security technologies and system architectures in the field of space security engineering;
• as a technical officer, proposing and following R&D activities in the area of security for space systems and missions;
• participating in the follow-up of the procurement and implementation of industrial contracts, technology development, laboratory tools, equipment, etc.;
• supporting laboratory activities relating to security engineering and assessment as required;
• continuously following technological trends and evolutions in the scientific fields relevant to this position.

Technical competencies

• Good knowledge of space system engineering
• Good knowledge of security threats against space missions and corresponding mitigations
• Knowledge of modern applied cryptography
• Good knowledge of security standards, hardening guidelines and security best practices
• Knowledge of space security standards, especially ECSS and CCSDS

Behavioural competencies

• Result Orientation
• Operational Efficiency
• Fostering Cooperation
• Relationship Management
• Continuous Improvement
• Forward Thinking

Education and professional experience

A master's degree in Electronics, Telecommunications, Aerospace, Computer Science or Cyber Security engineering discipline is required for this post together with at least 3 years of relevant professional experience.

Additional requirements

Knowledge of radiofrequency security is an asset.

Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations and eligible to acquire the security clearance by their national security administrations.

Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

Nationality and Languages

Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, Sweden, Switzerland, the United Kingdom and Canada, Cyprus, Latvia, Lithuania and Slovakia.

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.