System Security Engineer

Location
ESTEC, Noordwijk, Netherlands

System Security Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality.

The System Security Section is responsible for the end-to-end system security engineering of the Agency’s missions, projects, and activities, in space, ground, user segments and communication links, at system, subsystem, element and equipment level. It covers the missions from study phase to definition of requirements, design, development, security integration / verification, and security service preparation, across the full stack, from physical to application layer. The System Security Section provides functional support to ESA missions and projects in the area of End-End end security engineering & and cyber security. To serve these functions, it also defines and executes the associated technology research and developments (R&D) and studies.

This position is for the support of European Quantum Communication Infrastructure (EuroQCI), entrusted to ESA by the European Commission, and the ESA Secure And cryptoGrAphic (SAGA) mission projects in the Directorate of Connectivity and Secure Communication (CSC). The SAGA project aims to develop and deploy the EuroQCI first first-generation space component (space and related ground/user segment) for preliminary QKD service validation.

As a System Security Engineer for EuroQCI and SAGA, you will be part of projects’ Core Team and you will work closely with the CSC Security Office. You will hold lead technical responsibilities for the security baseline and implementation of the projects. Your role will cover all areas of security engineering, information security and cyber security across terrestrial and space environments. You will be responsible for integrating security engineering in the development of both EuroQCI and SAGA in close coordination with the EuroQCI E2E System Security Engineer, the ESA Security Office (ESO), other relevant ESA Directorates and our industrial partners. You will also be responsible for developing a long-term relationship with industry partners by fostering reliable technical collaboration and steering innovation developments and digitalization procurement.

• Be responsible for all security engineering activities for SAGA/EuroQCI in all phases of the project.
• Participate in programme reviews of the projects, assessing and being responsible for the security design, implementation, qualification and validation of space systems at system level (including ground, space, user segment and communication links), to ensure development is in line with the relevant programme security requirements.
• Be responsible for the end-to-end system security architecture and implementation of the corresponding security requirements of EuroQCI and SAGA.
• Be responsible for the development and maintenance of various technical documents (security requirements, security management plans, etc.).
• Lead the SAGA/EuroQCI Security Engineering team as a security design authority.
• Be responsible for and coordinate the SAGA/EuroQCI security risk assessment with the ESA Security Office (ESO).
• Coordinate with the product assurance, system and payload leads during development, integration and testing activities for the resolution of potential deviations.
• Serve as the technical interface for designing, supporting and maintaining SAGA/EuroQCI cyber security processes and procedures, in cooperation with the ESA Security Office.
• Define and maintain the SAGA/EuroQCI cyber security policy.
• Act as the technical focal point within the team on SAGA/EuroQCI cyber and security matters, applying standard security techniques and architectures to mitigate security risks.
• Provide regular reporting to project management, identifying technical and security risk areas, proposing and monitoring mitigation measures.
• Contribute to the management of the schedule and propose schedule risk mitigation actions within your area of responsibility.
• Monitor the industrial preparation for in-orbit QKD in-flight spacecraft commissioning and service provision in collaboration with project and other teams, as necessary.
• Define and validate the end-to-end security baseline, applicable to large-scale ground infrastructure (including fibre optic distributed interconnected systems), ground-to-space and space-to-space.
• Coordinate with ESO in the preparation of the certification and accreditation dossier.
• Foster new security application areas for multidisciplinary activities, placing emphasis on innovative concepts, cutting-edge technologies and system architectures in the field of space security engineering.
• Propose and supervise/monitor as a Technical Officer research and development (R&D) activities in the area of security for space systems and missions.
• Continuously follow technological trends and evolutions in the scientific fields relevant for this position.

• Very good knowledge of security threats against space missions and corresponding mitigations.
• Knowledge of modern applied cryptography.
• Good knowledge of security standards, hardening guidelines and security best practices.
• Deep knowledge of security engineering for communications systems based on RF and quantum key distribution.
• Good knowledge of space system engineering, including ESA and/or industrial development, verification and procurement processes.
• Knowledge of complex project risk management processes and security assessments.
• Knowledge or experience in securing wide-area network infrastructures (including familiarity with fibre-optic technologies).
• Previous project experience and/or knowledge of quantum communications would be a distinct asset.
• Knowledge of network and satellite communications security.

• Result Orientation
• Operational Efficiency
• Fostering Cooperation
• Relationship Management
• Continuous Improvement
• Forward Thinking

For more information, please refer to the ESA Core Behavioural Competencies guidebook.

A master's in aerospace engineering, or cyber security, or telecommunications engineering or other relevant engineering discipline is required for this post.

ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, religious beliefs, age, disability or other characteristics.

At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process. If you would like to discuss this further, please contact us via email at contact.human.resources@esa.int.

In principle, recruitment will be within the advertised grade band (A2-A4). However, if the selected candidate has less than four years of relevant professional experience following the completion of the master’s degree, the position may be filled at A1 level.

Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations & eligible to acquire the security clearance by their national security administrations.

During the recruitment process, the Agency may request applicants to undergo selection tests. Additionally, successful candidates will need to undergo basic screening before appointment, which will be conducted by an external background screening service, in compliance with the European Space Agency's security procedures.

Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

The information published on ESA’s careers website regarding working conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have.

Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy,