Cybersecurity Engineer

Leonardo; Darmstadt; Hybrid; EUR 42.000 - 62.000; Vollzeit

Zusammenfassung

Leonardo is seeking a junior security professional to contribute to designing, developing, and implementing advanced security solutions. You will engage in threat modeling, risk analyses, SOC operations, and DevSecOps practices across diverse projects in a hybrid work setting.

The role emphasizes collaboration with system engineers and adherence to security standards (ISO 27001, NIST). A focus on IT security infrastructures, risk management, and hands-on SOC tool usage is expected.

Qualifikationen

• Security engineering experience across theory and hands-on work.
• Experience with IT security infrastructures and systems.
• Familiarity with ISO 27001 and NIST frameworks.
• Experience in designing, operating SOC and using SOC tools.
• Ability to translate security requirements into system designs.
• Team-oriented with strong problem-solving skills.

Aufgaben

• Develop and optimize SOC processes and security operations.
• Perform threat modeling and security risk analyses.
• Set security requirements for complex systems and ensure compliance.
• Contribute to policy development and implementation.
• Support DevSecOps and GitOps frameworks; collaborate with system engineers.

Kenntnisse

Security engineering

SOC operations

Threat modeling

Risk management

Python

Java

Problem solving

Ausbildung

Degree in Computer Science or related field

Tools

SIEM

SOAR

Asset Management

Ticket Management

Jobbeschreibung

Job Description:

What you will focus on

As a member of our team, you’ll have the opportunity to be involved in various aspects of designing, developing, and implementing innovative security solutions. Depending on project needs, this could include areas like Zero Trust, AI/ML applications in threat detection and response, Cloud Security, Quantum Cryptography, and building out Security Operations Centers (SOC). You may engage in activities such as threat modeling, conducting security risk analyses, and setting security requirements for complex systems.

You could also contribute to developing and optimizing SOC processes, and work on operational concepts for security infrastructures. Security analysis, incident management, threat monitoring, and system response might also be part of your journey with us, as well as supporting certification and accreditation processes, or implementing DevSecOps and GitOps frameworks.

There’s plenty of room for collaboration with system engineers to foster a comprehensive security approach throughout system lifecycles. You might also assist with policy development and implementation, and work alongside interdisciplinary teams to uphold security standards and regulations. This role offers a flexible pathway to engage with a wide array of security-related projects, adapting to where your skills and interests align most.

Who you are

We welcome applicants with experience in any combination of these areas, even if not all skills are covered

• Degree in Computer Science, Engineering, or a related field a focus on cybersecurity is a plus.
• Some experience in security engineering, covering both theoretical and hands-on work
• Practical experience in developing security solutions and architectures, with an emphasis on IT security infrastructures and systems.
• Familiarity with industry-standard security frameworks and regulations (e.g., ISO 27001, NIST).
• Knowledge and experience in Risk Management methodologies and tools.
• Background in designing, implementing, and/or operating Security Operations Centers (SOC), with hands-on experience using SOC tools (e.g., SIEM, SOAR, Asset Management, Ticket Management) and supporting security processes.
• Proficiency in conducting system security analyses and translating security requirements into system designs.
• Team-oriented, responsible, with strong problem-solving skills.

• Capable to perform trade-off analyses of available tools(COTS) to decide fit for the purpose

Additional Desirable Skills:

• Understanding of the Space Domain, including applications, protocols, CCSDS standards, and ECSS standards.
• Experience in performing RAMS (Reliability, Availability, Maintainability, Safety) analysis.

• Programming experience in Python and Java
• Cybersecurity certifications (SSCP, CISSP, etc.) or equivalent training would be a plus

Seniority: Junior

Primary Location: DE - Darmstadt - Europahaus

Contract Type:

Hybrid Working: Hybrid