Cyber Security Engineer (f/m/d)

SSC Space; Darmstadt; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

Relocation support

30 days paid vacation

German language course

Gym & health program

Public transportation tickets

Zusammenfassung

SSC Space is seeking a Cyber Security Engineer for a full‑time role in Germany (Gilching or Darmstadt). You will drive NIS2 and CRA compliance, design secure SaaS architectures, and coordinate vulnerability management and incident response across cloud environments.

The position requires a Master's in a related field, 3–5+ years of security experience, English fluency, and EU citizenship. Join SSC Space to contribute to mission-critical cyber resilience across space components, with strong

Qualifikationen

• Master's degree in Cyber Security, Computer Science, Information Security, or related field.
• 3–5+ years of experience in cybersecurity, information security, or security engineering.
• Experience with cybersecurity compliance frameworks and standards.
• Fluency in English.
• EU Citizenship required.

Aufgaben

• Lead the implementation of cybersecurity measures required under NIS2 and the Cyber Resilience Act (CRA).
• Define and implement security architecture for SaaS solutions and secure software development lifecycle practices.
• Coordinate vulnerability management, threat modelling, and incident response activities.
• Ensure security controls across IAM, encryption, logging, and cloud infrastructure.
• Support audits, regulatory compliance, and security certifications.
• Collaborate with development teams to embed security-by-design and security-by-default principles.

Kenntnisse

NIS2 Directive

Cyber Resilience Act

ISO 27001

Security risk management

Business continuity

DevSecOps

Cloud platforms

SaaS architectures

Vulnerability management

Threat modelling

Incident response

Security by design

Docker

Scrum

Ausbildung

Master's degree in Cyber Security

Tools

Docker

Jobbeschreibung

Description

Start Date: Asap

Location: Gilching or Darmstadt, Germany

Requirement: EU Citizenship

Working hours: Full time, 40h/week

Submission deadline: 2026-09-25

About SSC Space: Welcome to SSC Space – the perfect workplace for those passionate about technology in general and space in particular. With space organizations, research institutes, institutional and commercial actors as customers, we offer specialist expertise in satellite communications, space consulting services, rocket and balloon systems, flight test services, satellite propulsion systems, and much more. SSC also has one of the world’s largest global networks of ground stations for satellite communications. We own and operate the Esrange Space Center in Kiruna, northern Sweden, with the aim of launching satellites in the near future. Are you fueled by a passion for people and the ambition to create an awesome workplace? Are you ready to embark on an exciting journey with us to help earth benefit from space? If you answered yes to the question, we invite you to seize the opportunity to make a significant impact as a Cyber Security Engineer. We are looking for a dedicated person who shares our core values of Customer passion, Care, Collaboration, Curiosity, and Courage.

Security: In line with security requirements for the concerned missions of this position, the candidate has to hold a European citizenship. Evidence of eligibility will be required from candidates as part of the recruitment process. Furthermore, in view of the nature of the work the company is in, all potential employees will undergo stringent reference and identity checks.

Responsibilities

• NIS2 & CRA Compliance Program
  • Lead the implementation of cybersecurity measures required under NIS2 and the Cyber Resilience Act (CRA).
  • Perform gap analyses against regulatory requirements and develop implementation roadmaps.
  • Define and maintain security policies, procedures, standards, and governance processes.
  • Support Business Continuity Management (BCM), risk assessments, and Business Impact Analysis (BIA).
  • Maintain security incident management and reporting processes.
  • Develop and maintain risk registers and mitigation plans.
  • Coordinate cybersecurity audits, assessments, and compliance reviews.
  • Support supplier and third-party security evaluations.
  • Prepare evidence and documentation required for regulatory compliance and audits.
  • Deliver cybersecurity awareness and training initiatives across the organization.
• SaaS Product Cyber Resilience
  • Define and implement security architecture for SaaS solutions.
  • Establish secure software development lifecycle practices.
  • Conduct threat modelling, security risk assessments, and security design reviews.
  • Define product security requirements aligned with CRA and industry best practices.
  • Coordinate vulnerability management activities, including scanning, remediation, and disclosure processes.
  • Support penetration testing and security validation activities.
• Ensure implementation of security controls covering:
  • Identity and access management
  • Authentication and authorization
  • Encryption and key management
  • Logging, monitoring, and incident detection
  • Backup and recovery
  • Software supply chain security
  • Secure cloud infrastructure
• Define and monitor cybersecurity KPIs and resilience metrics.
• Support product certification and customer security assessments when required.
• Security Operations & Continuous Improvement
  • Monitor emerging cyber threats and regulatory developments.
  • Develop response plans and support incident investigations.
  • Contribute to continuous improvement of cybersecurity processes and tools.
  • Collaborate with development teams to integrate security-by-design and security-by-default principles.
  • Support security reporting to management and relevant stakeholders.

Requirements

• Master's degree in Cyber Security, Computer Science, Software Engineering, Information Security, or a related field.
• More than 3-5 years of experience in cybersecurity, information security, or security engineering.
• Experience with cybersecurity compliance frameworks and standards.
• Strong understanding of:
  • NIS2 Directive
  • Cyber Resilience Act (CRA)
  • ISO 27001
  • Security risk management
  • Business continuity and resilience concepts
• Experience with secure software development and DevSecOps practices.
• Knowledge of cloud platforms and SaaS architectures.
• Familiarity with vulnerability management, threat modelling, and incident response.
• Ability to translate regulatory requirements into practical technical and organizational measures.
• Strong analytical, documentation, and communication skills.
• Fluency in English
• The following additional qualifications are an advantage:
  • Experience in the Space Industry
  • Understanding of latest technological advancements in the field of Artificial Intelligence
  • Knowledge of containerization technologies such as Docker
  • Knowledge of the Software Development Lifecycle
  • Previous experience working in a Scrum Team

Benefits

• Thriving Environment: A growing and international environment with diverse backgrounds to learn from, with a lot of social events.
• Work-Life Balance: Take advantage of our relocation support and 30 days of paid vacation.
• Develop yourself: Enjoy permanent employment with diverse opportunities for growth, with our training program and a German language course.
• Well being: Prioritize your well-being with access to our gym program, bike lease program, and company doctor services.
• Supportive Workplace: Experience our open-door policy and ISO 9001-certified workplace, where your voice is valued and your contributions recognized
• Rewards and Incentives: Receive a competitive salary, bonus scheme, deferred compensation scheme and sponsored public transportation tickets.

Our Values

SSC Space is a leading global provider of advanced space services, with more than 50 years of experience. We help space organizations, research institutes, commercial and institutional actors from all over the world to get access to space.

With local presence on all continents and about 750 committed employees, we offer specialist expertise in satellite communications and satellite control services, spacecraft operations, rocket and balloon systems, launch services and flight test services, as well as engineering, operations and consultancy services for space missions.