Security Engineer - Cybersecurity - IRIS2

Hispasat, as part of the SpaceRISE consortium, is responsible for the technical implementation and ensuring the success of the IRIS² project, leveraging its extensive experience in satellite communications. This collaboration is essential to provide secure and reliable high-performance communication solutions to the European Union and its member states.

To be part of this project, we are looking for Security Engineer - Cybersecurity. The responsibilities of the position are as follows:

• Review functional and contractual documentation related to flight and ground architectural diagrams, requirement lists and Statements of Work.
• Analyse documentation from cybersecurity and information-protection perspectives, identify relevant requirements and contribute to its finalisation as appropriate.
• Tailor general security requirements and flow them down to interfaces and subsystems.
• Design, analyse and perform trade-offs on security architecture choices, with a focus on encryption technologies, Key Management Facilities and key distribution, together with their procurement and deployment, pursuing cost- and time-efficient accreditation.
• Support the project team on security requirement-compliance analysis, implications for infrastructure implementation, identification of security flaws and vulnerabilities, and verification and validation activities.
• Follow system integration, testing, verification and validation, assess compliance with security requirements and propose treatment plans.
• Analyse the exploitability and impact of vulnerabilities and propose appropriate mitigations and countermeasures.
• Conduct authorised hands-on penetration tests to identify security flaws.
• Support cybersecurity audits and the regular security upgrades required for the system.
• Support the development and maintenance of technical documents, including the Security Management Plan, end-to-end space-system security architecture, security design and corresponding security requirements.
• Review, analyse and update security documentation together with the project team and external stakeholders.
• Contribute to the specification and review of implementation plans for operational sites from cybersecurity and information-protection perspectives.
• Participate in the follow-up of the procurement and implementation of industrial contracts, technology developments, laboratory tools and equipment.
• Foster new security application areas for multidisciplinary activities, emphasising innovative concepts, cutting-edge technologies and system architectures in collaboration with European New Space companies.
• Own or contribute to the preparation and closure of institutional contract milestone reviews, including ESA and European Commission reviews.
• Report to the Programme Manager.

• Bachelor's or Master's Degree in Telecommunications Engineering, Network Engineering, Cybersecurity Engineering or a related field.
• At least 5 years of experience in cybersecurity engineering activities or secure encryption, preferably in the satellite-communications domain.
• Proven experience working with institutional customers or national governmental institutions, particularly in security risk management, security threats and incidents, security vulnerabilities and malware analysis.
• Sound knowledge of security technologies, including encryption, secure Authentication, Authorisation and Accounting, Key Management Facilities, Security Information and Event Management, and Security Orchestration, Automation and Response.
• Sound knowledge of ISO/IEC 27000-series security standards and ECSS.
• Security-engineering experience in programmes covering flight and ground infrastructure, including on-board cryptographic units, secure SIMs, TM/TC encryption, satellite control centres, IT and data centres, 5G systems, OSS/BSS and terrestrial fixed and mobile networks.
• Knowledge of space security standards, particularly ECSS and CCSDS.
• Experience working with European institutions, including EUSPA, the European Commission and ESA, or equivalent organisations, in secure environments for European space projects.
• Experience working within the European regulatory environment for cybersecurity and accreditation is considered an asset.
• Nationality of an EU Member State and willingness to undergo an EU Secret clearance process.
• Possession of an EU security clearance is considered an asset.
• Fluency in English, both written and spoken; any other European language is considered an asset.

• Arganda del Rey, Madrid, Spain.

At Hispasat we promote equal opportunities and an inclusive environment. All our selection processes are based on objective criteria, without distinction of gender, age, origin, sexual orientation, disability or other personal or social conditions. We value diversity as a driver of innovation and growth.