Cyber Security Architect

Job description

Job Description:

SUMMARY

Are you a Cyber Security Architect ready to take on new and exciting challenges?... Do you dare to accept the challenge of working for a worldwide aerospace leader company?...

If you are a highly motivated Engineer, working in Cyber Security field that counts with real work experience in Risk Analysis Methodologies, designing Security Architectures, strong infrastructure and/or secure development background, and real passion for Cyber Security, If you are ready for to be part of the current cybersecurity revolution in the Aeronautic Industry this position is what you're looking for…

Airbus gives you the opportunity to apply for it!... You will feel challenged with a job that won't bore you!...

We are looking for a Cyber Security Architect to join our Product Security team within engineering organization in Airbus Defence & Space in Getafe (Madrid).

You will be key in ensuring that the Airbus Defence and Space Products and supporting services are protected against cybersecurity threats throughout their entire lifecycle (i.e. from early R&T phases, definition, development, implementation, industrialization, operation, maintenance and support, through to end of life and disposal). You will work in a new and challenging international environment where cyber security is becoming and continuously growing as a key factor for all products designed and manufactured by Airbus Defence and Space.

TASKS & RESPONSIBILITIES

You will be in charge of the product security requirements definition, design, implementation, integration, test, verification and compliance.

As a Cyber Security Architect you will drive the definition of product security architectures and design in accordance to their security requirements derived from the security risk assessments using methodologies and tools like MAGERIT (PILAR), NIST, EBIOS, EUROCAE ED202A, 203A. You will specify what security controls are to be applied and where in the overall, associated product architecture.

You will contribute to guarantee that the Airbus Defence and Space Products are inherently secure by design and they fulfil the security requirements in accordance to the applicable national/international security regulations.

You will work in a very close collaboration with all the relevant stakeholders (e.g. Customer, Program manager, Chief engineer,…) for accomplishing the product security milestones for the different programs.

As a Cyber Security Architect the main responsibilities will be to:

·  Have a collaborative mindset, and be a real team player.
·  Challenge traditional ways of thinking and propose new ideas and new ways of working.
·  Lead and manage the security aspects of the Products through their entire lifecycle.
·  Provide cybersecurity consultancy and advisory to business projects.
·  Adopt and promote a security-by-design approach with the different projects stakeholders.
·  Proactively contribute to the business solutions’ architecture and design to manage and reduce risks.
·  Conduct the security risk assessments on the Products (including threat and vulnerability assessment) using tools and methodologies like MAGERIT, PILAR, NIST, EBIOS, EUROCAE ED202A and ED203B.
·  Define the security requirements to mitigate the security risks.
·  Design the security architectures in accordance to the security requirements.
·  Decompose the high-level security design into low-level detailed security designs for each sub-system or component.
·  Ensure the security compliance of the Products in accordance to the national and international security regulations in accordance to the applicable criteria and methodologies (CC/CEM, ITSEC/ITSEM, CCN-STICs...).
·  Drive the definition, development and deployment of the Security Operating Procedures in order to ensure the security maintenance of the Products along their entire lifecycle.
·  Act as the product security focal point in your domain.
·  Participate in meetings with the Customer and lead the Customer on our Product Security approach.
·  Participate in the Airbus international working groups.
·  Ensure the good reporting for your activity.

REQUIREMENTS

Soft Skills
- Excellent interpersonal and Leadership skills.
- Highly innovative mindset and permanently challenging the status quo.
- Passionate about Aircrafts, Security and Technology.
- In depth interest to Engineering matters.
- Ability to learn and grow in an evolving environment.
- Excellent written and oral communication skills.
- Ability to work in an environment that requires a high level of detail and confidentiality.
- Proactive, self-motivated with the ability to work independently and as a team member in a challenging environment.
- Able to work autonomously as well as in international teams.
- Strong customer focus and result orientation.
- Strong team player.

Technical Skills
- Bachelors or Master in Telecommunication Engineer or Aeronautical Engineer or Computer Science.
- At least 3 years of experience in Information Security and/or Aircraft Systems design and development and/or Aircraft Safety.

- Threats and risk analysis methods and tools used (MAGERIT, PILAR, NYST, EBIOS, EUROCAE ED203A...)

- Strong knowledge and experience in  Systems and applications security architecture design.∙

- Strong knowledge of network and application security architecture and operating systems.

- Knowledge of how to secure systems (application and infrastructure) and implement hardening in systems.

- Functional Security Test and penetration/refutation Testing
- Able to adapt to new regulations and methods of applying the security concepts and to a new environment like A/C systems

- Able to write clear and consumable security documentation.
- Advanced level of English.
- Good command of French or German is an advantage but not essential.

Airbus benefits

At Airbus we are focused on our employees and their welfare. Take a look at some of our social benefits:

·  Flexible workshift
·  Option of continuous schedule from May to September
·  Vacation days plus additional days-off along the year (+35 working days off in total)
·  Attractive & competitive salary and additional bonus
·  Hybrid model of working when possible, promoting the work-life balance
·  Collective transport service in some sites
·  Benefits such as health insurance, employee stock options, retirement plan, or study grants
·  On-site facilities (among others): free canteen, kindergarten, medical office
·  Possibility to collaborate in different social and corporate social responsibility initiatives
·  Excellent upskilling opportunities and great development prospects in a multicultural environment
·  Special rates in in a wide range of products & other benefits

The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs.

This role will involve occasional travel for business.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:
Airbus Defence and Space SAU

Employment Type:
Permanent

-------

Experience Level:
Professional

Job Family:
Cyber Security

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to  emsom@airbus.com .

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.