Security Engineer - Accreditation - IRIS2

Hispasat, as part of the SpaceRISE consortium, is responsible for the technical implementation and ensuring the success of the IRIS² project, leveraging its extensive experience in satellite communications. This collaboration is essential to provide secure and reliable high-performance communication solutions to the European Union and its member states.

To be part of this project, we are looking for Security Engineer - Accreditation. The responsibilities of the position are as follows:

Responsibilities

• Review functional and contractual documentation related to flight and ground architectural diagrams, requirement lists and Statements of Work.
• Analyse documentation from cybersecurity and information-protection perspectives, identify relevant requirements and contribute to its finalisation as appropriate.
• Plan, prepare and support accreditation activities for Flight and Ground Segment systems in compliance with applicable security and regulatory standards.
• Support the project team on security requirement-compliance analysis, implications for infrastructure implementation, identification of security flaws and vulnerabilities, and verification and validation activities.
• Follow system integration, testing, verification and validation, assess compliance with security accreditation requirements and propose treatment plans.
• Develop and maintain accreditation documentation, including Security Risk Assessments, Security Operating Procedures and accreditation evidence packages.
• Coordinate with accreditation authorities, cybersecurity teams, system engineering and operational stakeholders throughout the accreditation lifecycle, from design to operations.
• Apply security frameworks, risk-management methodologies and accreditation processes applicable to space programmes, including the handling of Classified Information where required.
• Support cybersecurity audits and regular system security upgrades to achieve accreditation and maintain the required security levels.
• Identify, track and resolve accreditation findings, ensuring that security requirements are implemented and maintained throughout system operations.
• Review, analyse and update security documentation together with the project team and external stakeholders.
• Contribute to the specification and review of implementation plans for operational sites from cybersecurity and information-protection perspectives.
• Own or contribute to the preparation and closure of institutional contract milestone reviews, including ESA and European Commission reviews.
• Support security accreditation and compliance activities for European space programmes, such as ESA, GOVSATCOM, Galileo and Copernicus, including the preparation of evidence for security audits and accreditation reviews.
• Report to the Programme Manager.

Minimum requirements

• Bachelor's or Master's Degree in Telecommunications Engineering, Network Engineering, Cybersecurity Engineering or a related field.
• At least 5 years of experience in cybersecurity engineering, including accreditation activities or secure encryption, preferably in the satellite-communications domain.
• Proven experience working with institutional customers or national governmental institutions, particularly in security risk management, security threats and incidents, security vulnerabilities and malware analysis.
• Sound knowledge of security technologies, including encryption, secure Authentication, Authorisation and Accounting, Key Management Facilities, Security Information and Event Management, and Security Orchestration, Automation and Response.
• Sound knowledge of ISO/IEC 27000-series security standards and ECSS.
• Security-engineering experience in programmes covering flight and ground infrastructure, including on-board cryptographic units, secure SIMs, TM/TC encryption, satellite control centres, IT and data centres, 5G systems, OSS/BSS and terrestrial fixed and mobile networks.
• Knowledge of space security standards, particularly ECSS and CCSDS.
• Experience working with European institutions, including EUSPA, the European Commission and ESA, or equivalent organisations, in secure environments for European space projects.
• Experience working within the European regulatory environment for cybersecurity and accreditation is considered an asset.
• Nationality of an EU Member State and willingness to undergo an EU Secret clearance process.
• Possession of an EU security clearance is considered an asset.
• Fluency in English, both written and spoken; any other European language is considered an asset.

Location

• Arganda del Rey, Madrid, Spain.

At Hispasat we promote equal opportunities and an inclusive environment. All our selection processes are based on objective criteria, without distinction of gender, age, origin, sexual orientation, disability or other personal or social conditions. We value diversity as a driver of innovation and growth.