Cybersecurity Engineer

leonardocompany; United States; Hybrid; USD 58,000 - 99,000; Full time

Job summary

Leonardo is seeking a Junior Security Engineer to join our security team in Darmstadt. You will help design, develop, and implement innovative security solutions across Zero Trust, cloud security, AI/ML threat detection, and SOC operations.

You will engage in threat modeling, risk analyses, and defining security requirements for complex systems, collaborating with system engineers and interdisciplinary teams to uphold standards and regulations.

Qualifications

• Degree in Computer Science, Engineering, or a related field with a cybersecurity focus preferred.
• Experience in security engineering across theoretical and hands-on domains is expected.
• Familiarity with industry-standard security frameworks and regulatory requirements (ISO 27001, NIST) desired.

Responsibilities

• Design, develop, and implement secure solutions across various domains including Zero Trust and Cloud Security.
• Perform threat modeling and security risk analyses; translate security requirements into system designs.
• Contribute to SOC processes; support certification and accreditation activities; enable DevSecOps and GitOps practices.

Skills

Security engineering

SOC design

Threat modeling

Python

Java

ISO 27001 familiarity

NIST familiarity

RAMS analysis

Education

Bachelor's degree in Computer Science or related field

Cybersecurity focus

Tools

SIEM

SOAR

Asset Management

Ticket Management

Job description

Job Description:

What you will focus on

As a member of our team, you'll have the opportunity to be involved in various aspects of designing, developing, and implementing innovative security solutions. Depending on project needs, this could include areas like Zero Trust, AI/ML applications in threat detection and response, Cloud Security, Quantum Cryptography, and building out Security Operations Centers (SOC). You may engage in activities such as threat modeling, conducting security risk analyses, and setting security requirements for complex systems.

You could also contribute to developing and optimizing SOC processes, and work on operational concepts for security infrastructures. Security analysis, incident management, threat monitoring, and system response might also be part of your journey with us, as well as supporting certification and accreditation processes, or implementing DevSecOps and GitOps frameworks.

There's plenty of room for collaboration with system engineers to foster a comprehensive security approach throughout system lifecycles. You might also assist with policy development and implementation, and work alongside interdisciplinary teams to uphold security standards and regulations. This role offers a flexible pathway to engage with a wide array of security-related projects, adapting to where your skills and interests align most.

Who you are

We welcome applicants with experience in any combination of these areas, even if not all skills are covered

• Degree in Computer Science, Engineering, or a related field a focus on cybersecurity is a plus.
• Some experience in security engineering, covering both theoretical and hands‑on work
• Practical experience in developing security solutions and architectures, with an emphasis on IT security infrastructures and systems.
• Familiarity with industry-standard security frameworks and regulations (e.g., ISO 27001, NIST).
• Knowledge and experience in Risk Management methodologies and tools.
• Background in designing, implementing, and/or operating Security Operations Centers (SOC), with hands‑on experience using SOC tools (e.g., SIEM, SOAR, Asset Management, Ticket Management) and supporting security processes.
• Proficiency in conducting system security analyses and translating security requirements into system designs.
• Team-oriented, responsible, with strong problem‑solving skills.
• Capable to perform trade‑off analyses of available tools(COTS) to decide fit for the purpose

Additional Desirable Skills:

• Understanding of the Space Domain, including applications, protocols, CCSDS standards, and ECSS standards.
• Experience in performing RAMS (Reliability, Availability, Maintainability, Safety) analysis.
• Programming experience in Python and Java
• Cybersecurity certifications (SSCP, CISSP, etc.) or equivalent training would be a plus

Seniority:

Junior

Primary Location:

DE - Darmstadt - Europahaus

Contract Type:

Hybrid Working:

Hybrid