Job Description
As part of the team within System Security Section you will have the following responsibilities:
- Support to the definition/evolution of the security frameworks for all Earth Observation (EO) programs;
- Participate in program reviews of projects, assessing the security design, implementation, qualification and validation, to ensure development is in line with relevant program cyber security requirements
- Review and contribute to system security architecture and system security requirements;
- Analyse and access security related Requests for Deviations / Requests for Waivers and recommend proposed way forward;
- Support to the execution of security risk assessment, security requirements (SSRS) definition and preparation of security treatment plan;
- Organise vulnerability assessment and penetration testing campaigns,assess the findings, propose mitigations, and analyze collected evidence of fixed and mitigated vulnerabilities;
- Support the development and maintenance of various technical documents (security requirements, security management plans, etc.);
- Follow System Integration, Testing, Verification and Validation, assess compliance to the security requirements and propose treatment plans;
- Foster new security application areas for multidisciplinary activities,placing emphasis on innovative concepts, cutting-edge technologies and system architectures in the field of cyber security;
- Provide technical expertise regarding design, implementation and operations of security services and architectures support to technical management of selected contracts in the security domain (e.g. the new Coordination Service – Security management for Copernicus Space Component);
- Support to the PSSO (Project / System Security Officer) in security incident handling coordination and security deviation management;
- Support PSSO in managing DPNR and compliance with ESA PDP and EU GDPR;
- Continuously follow technological trends and evolutions at the scientific fields relevant for this position.
Qualifications
You will have the following qualifications and relevant experience:
- University degree a master or PhD from a recognised Institution of secondary studies or equivalent qualification in (preferably in computer science/cyber security, or telecom, or aerospace or navigation)
- A sound experience in Security risk assessment, vulnerability management and penetration testing (meant as a capability to understand if it is being conducted according to best practices, define rules of engagement, understand reports);
- Extensive knowledge related to Security policies, best practices,standards, and procedures (NIST, ISO, FIPS, Common Criteria, MITRE,etc.);
- A sound experience in security risk treatment measures definition and design of security architectures encompassing intrusion detection systems, firewalls, anti-virus software, log management, authentication systems, content filtering, SIEM, SOAR, etc;
- Experience in dealing with sensitive information and material involving National state interest, or EU interests;
- Very good knowledge in security best practices.
- Knowledge on Information Security Management Systems.
- Experience in IT systems and security matters, proved through external certifications (such as CISSP, GIAC, etc..);
- Fluency in English is mandatory; knowledge of another European language is an advantage.
Additional Information
This job is located in Noordwijk, the Netherlands.
If you think you have what it takes for this job, please send your CV (in English and in Word or PDF) by clicking on the button “Apply for this job” quoting job NL-HP-25147.
An exciting and dynamic international working environment awaits you!
Inclusive and committed employer, our company works every day to combat all forms of discrimination and promote a respectful working environment. That's why, committed to gender diversity and overall inclusivity, we encourage all applications and profiles.
Last apply date: 22/10/2025!