Cyber Security Engineer

Descripción de la oferta

Cyber Security Engineer

Airbus Defence & Space Madrid (ex Airbus Military)

Airbus Defence and Space is a division of Airbus Group formed by combining the business activities of Cassidian, Astrium and Airbus Military. The new division is Europe's number one defence and space enterprise, the second largest space business worldwide and among the top ten global defence enterprises. It employs some 40,000 employees generating revenues of approximately €14 billion per year.

Airbus is a global leader in aeronautics, space and related services. In 2016, it generated revenues of € 67 billion and employed a workforce of around 134,000. Airbus offers the most comprehensive range of passenger airliners from 100 to more than 600 seats. Airbus is also a European leader providing tanker, combat, transport and mission aircraft, as well as Europe's number one space enterprise and the world's second largest space business. In helicopters, Airbus provides the most efficient civil and military rotorcraft solutions worldwide.

Our people work with passion and determination to make the world a more connected, safer and smarter place. Taking pride in our work, we draw on each other's expertise and experience to achieve excellence. Our diversity and teamwork culture propel us to accomplish the extraordinary - on the ground, in the sky and in space.

Description of the job

A vacancy for an Aircraft Security Engineer has arisen within Airbus Defence & Space in Getafe.
The successful applicant will join TAEPH department.

Perfil buscado

Tasks & accountabilities

Mission:

·  The jobholder will contribute to ensure the Security of both Aircraft Systems and Ground Support Systems.
·  The jobholder will be in charge of the definition, design, implementation, integration, test and compliance of the security requirements of the business products (both Aircraft Systems and Ground Support Systems).

The main tasks and responsibilities will be focused on the aircrafts and information systems. They will include:

·  Perform the security risk analysis (threat and vulnerability assessment) on aircraft and information systems.
·  Define the security requirements and the architectures of the aircraft and information systems.
·  Support a culture of engagement across the engineering organization, which emphasizes shared responsibility in achieving secure designs.
·  Produce the system secure configuration guidelines.
·  Conduct the implementation and the integration of the security measures to protect and defend information and aircraft systems by ensuring their confidentiality, integrity and availability.
·  Develop the security test plans, the security test procedures and execute them on the aircraft systems.
·  Conduct penetration tests.
·  Guarantee the compliance on the security requirements against the national and international security regulations.
·  Conduct formal compliance process (security evaluation, certification and accreditation processes) in accordance to the appropriate criteria and methodologies (CC/CEM, ITSEC/ITSEM, CCN-STICs...).
·  Perform information systems security evaluation for verification and validation processes.
·  Perform security technical audits.
·  Provide innovative technology solutions in term of information security.
·  Production of the security operating procedures to guarantee the security of information systems throughout their lifecycle.

The successful candidate will be subjected to a NATO/Nacional security clearance in order to undertake related work in accordance with the business needs.

This role will involve occasional travel for business and as such the jobholder must be able to travel according to the business needs.

Required skills

We are looking for candidates with the following skills and experience:

·  At least 3-5 years of experience in Engineering (aircraft security & systems, information security, architecture design).
·  Strong knowledge of aircraft systems
·  At least 3-5 years of experience in Information Systems.
·  Experience in systems security integration and configuration (systems hardening): Microsoft and UNIX operating systems, databases, networking.
·  Experience in systems security audits, administration and also in the definition of security operating procedures.
·  Knowledge of NATO/National security regulations.
·  Knowledge of Security Evaluation, Certification and Accreditation Processes.
·  Solid understanding of networking and communications protocols.
·  Knowledge of software development: .NET, Java…
·  Advanced level of English and Spanish