Senior Engineer, Cyber Security and SecOps (IRIS2)

About the role

IRIS2 is the new European Union secure satellite constellation, built and operated by SES together with consortium partners. The IRIS2 team is moving into the next project phases and needs support for service provisioning and future products. As a Senior Engineer, you prepare plans for security system engineering and help execute them, working closely with the Programme Team, System Engineering, Security workgroups and external partners in an agile project organisation.

Key responsibilities

• Integrate security designs for systems and networks with multilevel security requirements and data classification requirements.
• Ensure security requirements are met in all aspects of the IRIS2 design and that systems follow the programme's security architecture and "Security by Design" principles.
• Coordinate "Security by Design" with managed service sub-contractors, Services and Operations teams, including change management.
• Lead or contribute to cybersecurity design and governance for space and ground segments, including accreditation data packages, compliance audits and penetration tests.
• Lead development and review of specification documents linked to Cyber Security and SecOps, and review plans for operational site implementation.
• Review and update the Cybersecurity Implementation Plan, Security Accreditation and Certification Plans, and related certification reports.
• Advise on security risk analysis, site security, DevSecOps, security product development and procurement, and on the Information Security Management System.
• Analyse and trade off security architecture choices, focusing on cryptography, access controls and GNSS resilience.

Required profile

• University degree in Engineering, Telecommunications or adjacent fields.
• At least 7 years of experience in satellite communications system architectures, solution design or deployment and security engineering.
• Experience with EU, ESA or national governmental institutions, including security risk management, threat and incident handling, and vulnerability and malware analysis.
• Experience with satellite control or data planes, IT and data centres, 5G systems, OSS/BSS, user terminals and terrestrial fixed and mobile networks.
• Eligibility for EU SECRET personnel security clearance, with willingness to undergo the clearance procedure.
• Fluent written and spoken English; other European languages are an asset.
• Willingness to work at least 60% onsite and travel as required.

Required skills

• Excellent project management and time management skills.
• Ability to work independently in complex, matrix organisations.
• Technical writing and proposal preparation.
• Strong leadership, teamwork and communication skills.