Cybersecurity Specialist - Defensive Design, Risk, Vulnerability & GRC

Soprasteria1; Machelen; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Soprasteria is expanding its cybersecurity team in Prague, offering hybrid work and European travel across space and critical infrastructure programmes. We seek specialists in defensive security design, vulnerability management, technical risk assessment, or cyber governance, who will align with their strengths to their track and contribute to secure systems from development through operation.

Fluency in English and eligibility for SECRET UE / EU SECRET PSC clearance are required or pursued,

Qualifications

• Relevant background in security architecture/design, vulnerability management, risk assessment, or IT/cyber GRC.
• Familiarity with ISO 27001/27005, NIST, or NIS.
• Ability to produce clear technical notes and audit/review reports.
• Fluent English (written and spoken) for international collaboration.
• Security clearance eligibility (SECRET UE / EU SECRET).

Responsibilities

• Embed security-by-design and defense-in-depth across the system lifecycle.
• Review vendor deliverables, SoC and VCD for compliance and traceability.
• Perform end-to-end Security Risk Assessments and maintain risk registers.
• Support accreditation processes and align with EU standards (ISO 27001, 27005, NIS).

Skills

Security architecture/design

Vulnerability management

Technical risk assessment

IT/cyber GRC

English fluency

Job description

Location: Prague (Hybrid / On-site at client premises) & occasional European travel

Clearance requirement: Eligibility for EU SECRET / NATO SECRET Personal Security Clearance (PSC)

About the Role

We are expanding our cybersecurity team supporting high-profile European space and critical infrastructure programmes (such as Galileo, EGNOS, GOVSATCOM, Copernicus, and IRIS²).

Because our project portfolio spans multiple distinct workstreams, we are looking for specialists across several different areas -including Defensive Security Design , Vulnerability Management , Technical Risk Assessment , and Cyber GRC . We do not expect a single candidate to cover all of these disciplines. Whether you are a hands‑on security architect, a risk analyst, a vulnerability specialist, or a GRC consultant, we want to match your specific strengths to the right track within our team

Track 1: Defensive Security Design & Architecture

• Embed security-by-design and defense-in-depth principles (physical, network, host, application, and data layers) across the system development lifecycle.
• Maintain security technical baselines, translate mission needs into actionable cybersecurity requirements (e.g., in DOORS), and ensure end-to-end traceability.
• Participate in engineering milestones (PDR, CDR, AR), Configuration Change Boards (CCB), and Anomaly Review Boards (ARB) to evaluate the security impact of system changes.
• Review vendor deliverables, Statements of Compliance (SoC), and Verification Control Documents (VCD).

Track 2: Vulnerability Assessment & Lifecycle Management

• Systematically review security weaknesses in complex systems, assign severity levels, and define practical operational mitigations.
• Track the lifecycle of known vulnerabilities and verify the implementation of mitigations by system operators and contractors.
• Support security incident interfaces, prepare technical inputs for Cyber Review Boards, and contribute to vulnerability databases.

Track 3: Technical Risk Assessment

• Perform end-to-end Security Risk Assessments (SRA)-from asset and threat modeling to evaluating impact, likelihood, and risk reduction.
• Maintain and update Security Risk Registers and track the progress of Risk Treatment Plans with stakeholders.
• Analyze the security impact of operational or infrastructure changes and incorporate penetration test findings into system security plans.

Track 4: Cyber Governance, Compliance & Accreditation (GRC)

• Support security accreditation processes and prepare documentation packages for Security Accreditation Boards.
• Align technical specifications and security policies with evolving EU regulations and international standards (e.g., ISO/IEC 27001, ISO/IEC 27005, NIS).
• Contribute to internal cybersecurity audits, operational compliance checks, and security awareness initiatives.

What We Are Looking For

• Relevant Background: Proven experience in at least one of the following: security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing.
• Frameworks & Standards: Familiarity with relevant security standards or regulations (such as ISO/IEC 27001, ISO/IEC 27005, NIST, or NIS).
• Analytical & Documentation Skills: Ability to produce clear technical notes, risk registers, compliance reviews, or audit reports depending on your specialization.
• Language: Fluency in English (written and spoken) to collaborate effectively across international technical teams and governance boards.
• Security Clearance: Ability to obtain (or already hold) a SECRET UE / EU SECRET Personal Security Clearance. (Bonus: Existing authorization for Galileo PRS handling)

Why Join Us?

• Tailored Role: Join a growing team where your responsibilities are aligned with your actual core expertise rather than a one-size-fits-all checklist.
• Unique Domain: Contribute to flagship European space, satellite navigation, and secure communications programmes.
• Growth & Mobility: Opportunity to collaborate closely with specialists in adjacent tracks and expand your skills over time if you wish.
• International Environment: Work alongside top European security experts and institutions in Prague and across Europe.