Cyber Security Architect

TN Spain; Getafe; Híbrido; EUR 50.000 - 90.000; Jornada completa

Descripción de la vacante

An established industry player is seeking a passionate Cyber Security Architect to join their dynamic Product Security team. This role offers the opportunity to work on cutting-edge aerospace projects, ensuring that products are secure throughout their lifecycle. You will define security requirements, conduct risk assessments, and collaborate with various stakeholders to drive security initiatives. If you thrive in a challenging environment and have a strong background in cyber security and engineering, this is the perfect opportunity to make a significant impact in a globally recognized organization.

Servicios

Health insurance

Employee stock options

Retirement plan

Study grants

Free canteen

Kindergarten

Medical office

Continuous schedule option

Vacation days (+35 total)

Upskilling opportunities

Formación

• 3+ years of experience in Information Security and Aircraft Systems design.
• Strong knowledge in Systems and applications security architecture design.

Responsabilidades

• Define and implement product security architectures and requirements.
• Conduct security risk assessments and ensure compliance with regulations.

Conocimientos

Information Security

Cyber Security Architecture

Risk Assessment

Team Collaboration

Communication Skills

Problem Solving

Educación

Bachelor in Telecommunication Engineering

Master in Aeronautical Engineering

Bachelor in Computer Science

Herramientas

MAGERIT

NIST

EBIOS

EUROCAE ED202A

Descripción del empleo

Are you a Cyber Security Architect ready to take on new and exciting challenges? Do you dare to accept the challenge of working for a worldwide aerospace leader company?

If you are a highly motivated Engineer, working in the Cyber Security field with real work experience designing Security Architectures, a strong infrastructure and/or secure development background, and a real passion for Cyber Security, this position is what you're looking for.

Airbus gives you the opportunity to apply for it! You will feel challenged with a job that won't bore you.

We are looking for a Cyber Security Architect to join our Product Security team within the engineering organization in Airbus Defence & Space in Getafe (Madrid).

You will be key in ensuring that the Airbus Defence and Space Products and supporting services are protected against cybersecurity threats throughout their entire lifecycle (i.e. from early R&T phases, definition, development, implementation, industrialization, operation, maintenance and support, through to end of life and disposal). You will work in a new and challenging international environment where cyber security is becoming and continuously growing as a key factor for all products designed and manufactured by Airbus Defence and Space.

TASKS & RESPONSIBILITIES

You will be in charge of the product security requirements definition, design, implementation, integration, test, verification and compliance.

As a Cyber Security Architect, you will drive the definition of product security architectures and design in accordance with their security requirements derived from the security risk assessments using methodologies and tools like MAGERIT (PILAR), NIST, EBIOS, EUROCAE ED202A, 203A. You will specify what security controls are to be applied and where in the overall product architecture.

You will contribute to guarantee that the Airbus Defence and Space Products are inherently secure by design and they fulfill the security requirements in accordance with the applicable national/international security regulations.

You will work in very close collaboration with all the relevant stakeholders (e.g. Customer, Program manager, Chief engineer) for accomplishing the product security milestones for the different programs.

As a Cyber Security Architect, the main responsibilities will be to:

• Have a collaborative mindset, and be a real team player.
• Challenge traditional ways of thinking and propose new ideas and new ways of working.
• Lead and manage the security aspects of the Products through their entire lifecycle.
• Provide cybersecurity consultancy and advisory to business projects.
• Adopt and promote a security-by-design approach with the different projects stakeholders.
• Proactively contribute to the business solutions’ architecture and design to manage and reduce risks.
• Conduct the security risk assessments on the Products (including threat and vulnerability assessment) using tools and methodologies like MAGERIT, PILAR, NIST, EBIOS, EUROCAE ED202A and ED203B.
• Define the security requirements to mitigate the security risks.
• Design the security architectures in accordance with the security requirements.
• Decompose the high-level security design into low-level detailed security designs for each sub-system or component.
• Ensure the security compliance of the Products in accordance with the national and international security regulations in accordance with the applicable criteria and methodologies (CC/CEM, ITSEC/ITSEM, CCN-STICs).
• Drive the definition, development and deployment of the Security Operating Procedures in order to ensure the security maintenance of the Products along their entire lifecycle.
• Act as the product security focal point in your domain.
• Participate in meetings with the Customer and lead the Customer on our Product Security approach.
• Participate in the Airbus international working groups.
• Ensure good reporting for your activity.

REQUIREMENTS

Soft Skills
- Excellent interpersonal and leadership skills.
- Highly innovative mindset and permanently challenging the status quo.
- Passionate about Aircrafts, Security and Technology.
- In-depth interest in Engineering matters.
- Ability to learn and grow in an evolving environment.
- Excellent written and oral communication skills.
- Ability to work in an environment that requires a high level of detail and confidentiality.
- Proactive, self-motivated with the ability to work independently and as a team member in a challenging environment.
- Strong customer focus and result orientation.
- Strong team player.

Technical Skills
- Bachelors or Master in Telecommunication Engineering, Aeronautical Engineering, or Computer Science.
- At least 3 years of experience in Information Security and/or Aircraft Systems design and development and/or Aircraft Safety.
- Knowledge of threats and risk analysis methods and tools (MAGERIT, PILAR, NIST, EBIOS, EUROCAE ED203A...).
- Strong knowledge and experience in Systems and applications security architecture design.
- Strong knowledge of network and application security architecture and operating systems.
- Knowledge of how to secure systems (application and infrastructure) and implement hardening in systems.
- Able to adapt to new regulations and methods of applying the security concepts and to a new environment like A/C systems.
- Able to write clear and consumable security documentation.
- Advanced level of English.
- Good command of French or German is an advantage but not essential.

At Airbus, we are focused on our employees and their welfare. Take a look at some of our social benefits:

• Option of continuous schedule from May to September.
• Vacation days plus additional days-off along the year (+35 working days off in total).
• Attractive & competitive salary and additional bonus.
• Hybrid model of working when possible, promoting the work-life balance.
• Collective transport service in some sites.
• Benefits such as health insurance, employee stock options, retirement plan, or study grants.
• On-site facilities (among others): free canteen, kindergarten, medical office.
• Possibility to collaborate in different social and corporate social responsibility initiatives.
• Excellent upskilling opportunities and great development prospects in a multicultural environment.
• Special rates in a wide range of products & other benefits.

The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs.

This role will involve occasional travel for business.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation, and sustainable growth.