Cybersecurity Engineer

Leonardo; Darmstadt; Hybrid; EUR 50.000 - 70.000; Vollzeit

Zusammenfassung

Leonardo is seeking a Junior Security Engineer in Darmstadt to design, develop, and implement security solutions across diverse projects. You will participate in threat modeling, risk analyses, and setting security requirements for complex systems.

Responsibilities include contributing to SOC processes, supporting certification activities, and applying DevSecOps practices. This role collaborates with system engineers to uphold security standards during system lifecycles, in a hybrid work setup.

Qualifikationen

• Degree in Computer Science, Engineering, or a related field; cybersecurity focus is a plus.
• Some experience in security engineering, including both theory and hands-on work.
• Practical experience developing security solutions and architectures for IT security infrastructures.
• Familiarity with ISO 27001 and NIST frameworks.
• Knowledge of risk management methodologies and tools.
• Background in designing, operating and/or supporting SOC with SOC tools.
• Ability translate security requirements into system designs.
• Team-oriented with strong problem-solving skills.
• Capability to perform trade-offs between COTS tools.

Aufgaben

• Contribute to security design, development, and implementation across projects.
• Engage in threat modeling and security risk analyses.
• Support certification and accreditation processes.
• Assist with DevSecOps and GitOps practices.
• Collaborate with system engineers to ensure secure lifecycles.
• Develop and optimize SOC processes.

Kenntnisse

Python

Java

SOC

Security engineering

Threat modeling

ISO 27001

NIST

SIEM

SOAR

Risk management

Ausbildung

Bachelor's degree in CS/Engineering

Tools

SIEM

SOAR

Asset management

Ticket management

Jobbeschreibung

Job Description:

What you will focus on

As a member of our team, you’ll have the opportunity to be involved in various aspects of designing, developing, and implementing innovative security solutions. Depending on project needs, this could include areas like Zero Trust, AI/ML applications in threat detection and response, Cloud Security, Quantum Cryptography, and building out Security Operations Centers (SOC). You may engage in activities such as threat modeling, conducting security risk analyses, and setting security requirements for complex systems.

You could also contribute to developing and optimizing SOC processes, and work on operational concepts for security infrastructures. Security analysis, incident management, threat monitoring, and system response might also be part of your journey with us, as well as supporting certification and accreditation processes, or implementing DevSecOps and GitOps frameworks.

There’s plenty of room for collaboration with system engineers to foster a comprehensive security approach throughout system lifecycles. You might also assist with policy development and implementation, and work alongside interdisciplinary teams to uphold security standards and regulations. This role offers a flexible pathway to engage with a wide array of security-related projects, adapting to where your skills and interests align most.

Who you are

We welcome applicants with experience in any combination of these areas, even if not all skills are covered

• Degree in Computer Science, Engineering, or a related field a focus on cybersecurity is a plus.
• Some experience in security engineering, covering both theoretical and hands-on work
• Practical experience in developing security solutions and architectures, with an emphasis on IT security infrastructures and systems.
• Familiarity with industry-standard security frameworks and regulations (e.g., ISO 27001, NIST).
• Knowledge and experience in Risk Management methodologies and tools.
• Background in designing, implementing, and/or operating Security Operations Centers (SOC), with hands-on experience using SOC tools (e.g., SIEM, SOAR, Asset Management, Ticket Management) and supporting security processes.
• Proficiency in conducting system security analyses and translating security requirements into system designs.
• Team-oriented, responsible, with strong problem-solving skills.
• Capable to perform trade-off analyses of available tools(COTS) to decide fit for the purpose

Additional Desirable Skills:

• Understanding of the Space Domain, including applications, protocols, CCSDS standards, and ECSS standards.
• Experience in performing RAMS (Reliability, Availability, Maintainability, Safety) analysis.
• Programming experience in Python and Java
• Cybersecurity certifications (SSCP, CISSP, etc.) or equivalent training would be a plus

Seniority:

Junior

Primary Location:

DE - Darmstadt - Europahaus

Hybrid Working:

Hybrid