Engineer Aviation Information Security

Task Responsibilities:

• Act as subject matter expert (SME) for cybersecurity controls protecting critical aviation information and communication systems
• Manage information security risks, vulnerabilities, and mitigations by performing and supporting risk assessments, threat modeling, and security impact analyses
• Perform information and cybersecurity risk assessments, threat modeling, vulnerability management, and define mitigation measures to ensure continuous protection of critical systems.
• Handle cybersecurity incidents and operational events affecting critical information and communication technology (ICT) systems related to aircraft operation.
• Handle PKI infrastructure and associated cryptographic and identity-based trust services, including lifecycle management, documentation, and procedures.
• Support the implementation, operation, and continuous improvement of aircraft log analysis, including security monitoring, event correlation, anomaly detection, and training of relevant personnel.
• Provide cybersecurity expertise, guidance, and training to internal stakeholders.
• Act as an IT representative within the Aircraft Information Security Center.
• Manage internal and external information security reporting.
• Review and support secure architectures, configurations, and design proposals related to aircraft and avionics systems.

Essential Requirements For The Position:

• Master’s Degree or equivalent in Computer Science, Information Security, Aeronautical Engineering or a related technical discipline.
• 5+ years of professional experience in IT, cybersecurity, or the airline/aviation domain, preferably within aviation, OT/ICS environments, or other safety-critical industries.
• Solid understanding of IT/OT network architectures, segmented networks, and secure communication protocols for avionics and aircraft data systems; knowledge of airline and aircraft systems is an asset.
• Strong expertise in network security, PKI/cryptography, secure configuration, identity-based trust models, and cloud/virtualized environments with secure deployment practices.
• Experience performing vulnerability assessments, risk analysis, and implementing security controls for embedded systems and safety-critical platforms, including avionics, airline ground support, and maintenance systems
• Hands-on experience with automated log analysis, event correlation, and anomaly detection for aircraft systems or other telemetry-based monitoring environments
• Familiarity with aviation cybersecurity standards and regulations, including DO-326A / ED-202A, DO-356A / ED-203A, DO-355A / ED-204A, manufacturer-specific cybersecurity requirements, and regulatory frameworks such as EASA Part-IS (or demonstrated ability to quickly acquire this knowledge).
• Strong analytical, problem-solving, and troubleshooting skills, with the ability to assess complex technical issues under operational and safety constraints.
• High level of responsibility, attention to detail, and commitment to excellence in safety-critical and high-reliability environments.
• Ability to communicate effectively with technical and operational stakeholders, including Engineering, Maintenance, Flight Operations, and external partners.
• Commitment to continuous professional development and maintaining up-to-date knowledge of evolving cybersecurity, aviation, and regulatory technologies.
• Fluent in English (spoken and written); proficiency in additional languages is a strong asset.
• Excellent interpersonal and communication skills with a customer-focused and collaborative mindset.
• Comfortable working in a multicultural, fast-paced, and highly regulated environment, with strong cross-functional collaboration.

Working Conditions:

• Permanent, full-time contract based in our HQ in Luxembourg.
• Occasional travel may be required.
• A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of a positive selection.