Cyber Security Engineer (NIS2, BASO) (f/m/d)

SSC Space; Darmstadt; Hybrid; EUR 75,000 - 110,000; Full time

Job summary

SSC Space in Darmstadt/Gilching, Germany is seeking a Cyber Security Engineer (NIS2, BASO) for a permanent, full-time role. You will lead NIS2 and CRA compliance, define security policies, and drive secure software practices for our SaaS products.

EU citizenship and 40h work week required. The position involves collaboration across product teams, risk assessments, incident response, and security operations to protect space-focused services.

Qualifications

• Master's degree in a cybersecurity-related field.
• 3-5 years of experience in cybersecurity or information security.
• Experience with NIS2, CRA, ISO 27001 and risk management.

Responsibilities

• Lead NIS2 and CRA compliance initiatives and define implementation roadmaps.
• Perform gap analyses and maintain governance policies and security programs.
• Coordinate audits, risk assessments, BCM, and incident response processes.
• Develop and maintain risk registers and mitigation plans.

Skills

Analytical skills

Documentation

Communication

Fluency in English

Education

Master's degree in Cyber Security or related field

Tools

Docker

Cloud platforms

SaaS architectures

Job description

Cyber Security Engineer (NIS2, BASO) (f/m/d)

Darmstadt/Gilching (DE) Germany Permanent

Description

Start Date: Asap
Location: Gilching or Darmstadt, Germany
Requirement: EU Citizenship
Working hours: Full time, 40h/week
Submission deadline: 2026-11-01

About SSC Space: Welcome to SSC Space – the perfect workplace for those passionate about technology in general and space in particular. With space organizations, research institutes, institutional and commercial actors as customers, we offer specialist expertise in satellite communications, space consulting services, rocket and balloon systems, flight test services, satellite propulsion systems, and much more. SSC also has one of the world’s largest global networks of ground stations for satellite communications. We own and operate the Esrange Space Center in Kiruna, northern Sweden, with the aim of launching satellites in the near future.

Are you fueled by a passion for people and the ambition to create an awesome workplace? Are you ready to embark on an exciting journey with us to help earth benefit from space? If you answered yes to the question, we invite you to seize the opportunity to make a significant impact as a Cyber Security Engineer, respectively Business Area Security Officer (BASO). We are looking for a dedicated person who shares our core values of Customer passion, Care, Collaboration, Curiosity, and Courage.

Security: In line with security requirements for the concerned missions of this position, the candidate has to hold a European citizenship. Evidence of eligibility will be required from candidates as part of the recruitment process. Furthermore, in view of the nature of the work the company is in, all potential employees will undergo stringent reference and identity checks.

Requirements

• Master's degree in Cyber Security, Computer Science, Software Engineering, Information Security, or a related field.
• More than 3-5 years of experience in cybersecurity, information security, or security engineering.
• Experience with cybersecurity compliance frameworks and standards.
• Strong understanding of:
  • NIS2 Directive
  • Cyber Resilience Act (CRA)
  • ISO 27001
  • Security risk management
  • Business continuity and resilience concepts
• Experience with secure software development and DevSecOps practices.
• Knowledge of cloud platforms and SaaS architectures.
• Familiarity with vulnerability management, threat modelling, and incident response.
• Ability to translate regulatory requirements into practical technical and organizational measures.
• Strong analytical, documentation, and communication skills.
• Fluency in English
• The following additional qualifications are an advantage:
  • Experience in the Space Industry
  • Understanding of latest technological advancements in the field of Artificial Intelligence
  • Java
  • Angular
  • Knowledge of containerization technologies such as Docker
  • Knowledge of the Software Development Lifecycle
  • Previous experience working in a Scrum Team

Responsibilities

• NIS2 & CRA Compliance Program
  • Lead the implementation of cybersecurity measures required under NIS2 and the Cyber Resilience Act (CRA).
  • Perform gap analyses against regulatory requirements and develop implementation roadmaps.
  • Define and maintain security policies, procedures, standards, and governance processes.
  • Support Business Continuity Management (BCM), risk assessments, and Business Impact Analysis (BIA).
  • Maintain security incident management and reporting processes.
  • Develop and maintain risk registers and mitigation plans.
  • Coordinate cybersecurity audits, assessments, and compliance reviews.
  • Support supplier and third-party security evaluations.
  • Prepare evidence and documentation required for regulatory compliance and audits.
  • Deliver cybersecurity awareness and training initiatives across the organization.
• SaaS Product Cyber Resilience
  • Define and implement security architecture for SaaS solutions.
  • Establish secure software development lifecycle practices.
  • Conduct threat modelling, security risk assessments, and security design reviews.
  • Define product security requirements aligned with CRA and industry best practices.
  • Coordinate vulnerability management activities, including scanning, remediation, and disclosure processes.
  • Support penetration testing and security validation activities.
• Ensure implementation of security controls covering:
  • Identity and access management
  • Authentication and authorization
  • Encryption and key management
  • Logging, monitoring, and incident detection
  • Backup and recovery
  • Software supply chain security
  • Secure cloud infrastructure
• Define and monitor cybersecurity KPIs and resilience metrics.
• Support product certification and customer security assessments when required.
• Security Operations & Continuous Improvement
  • Monitor emerging cyber threats and regulatory developments.
  • Develop response plans and support incident investigations.
  • Contribute to continuous improvement of cybersecurity processes and tools.
  • Collaborate with development teams to integrate security-by-design and security-by-default principles.
  • Support security reporting to management and relevant stakeholders.

Benefits

What we offer:

• Thriving Environment: A growing and international environment with diverse backgrounds to learn from, with a lot of social events.
• Work-Life Balance: Take advantage of our relocation support and 30 days of paid vacation.
• Develop yourself: Enjoy permanent employment with diverse opportunities for growth, with our training program and a German language course.
• Well being: Prioritize your well-being with access to our gym program, bike lease program, and company doctor services.
• Supportive Workplace: Experience our open-door policy and ISO 9001-certified workplace, where your voice is valued and your contributions recognized
• Rewards and Incentives: Receive a competitive salary, bonus scheme, deferred compensation scheme and sponsored public transportation tickets.

Our Values

SSC Space is a leading global provider of advanced space services, with more than 50 years of experience. We help space organizations, research institutes, commercial and institutional actors from all over the world to get access to space. With local presence on all continents and about 750 committed employees, we offer specialist expertise in satellite communications and satellite control services, spacecraft operations, rocket and balloon systems, launch services and flight test services, as well as engineering, operations and consultancy services for space missions.

We help Earth benefit from space. Learn more at sscspace.com