Key Tasks and Responsibilities              

As a member of a team providing services to ESOC you will be providing support for Cyber Safety and Security Operational Centre (C-SOC) Maintenance and Operations Service. You will have the following responsibilities:

• Prepare risk analysis for complex systems, HW and SW in view of improving the design proposing secure implementations;
• Experience in developing cybersecurity frameworks and cybersecurity management systems (CSMS) for operational technology including activities such as establishing plans for compliance with the applicable cybersecurity standards;
• Perform gap analysis regarding the client current development process and the applicable cybersecurity standard requirements;
• Give guidance on how to perform cyber security activities for operational technologies such as:
  • Security analysis and vulnerability analysis;
  • Cybersecurity Concept Development and Security Architecture Design;
  • Test and validation strategies;
  • Product development according to applicable standards;
  • Participate in technical discussion as part of business development efforts; Perform reviews and verification for cybersecurity work products;
  • Give guidance on how to perform cybersecurity testing related activities;
  • Participate in the elaboration of test plans and their execution for cybersecurity aspects such as but not limited to: Performing threat analysis; Posture Analysis; Penetration testing; Fuzz testing; Vulnerability Analysis.
• Proactively and reactively invoke the Incident Management process,
• Establish and maintain a Process Manual, detailing the individual service delivery and support processes;
• Organizing and participating in technical and monthly status reports;

Skills & Experience

You will have the following qualifications and relevant experience:

• Bachelor or Master’s degree in Engineering, Computer science or relevant disciplines;
• Minimum of 4 years experience in cyber security engineering;
• Strong understanding of:
  • System internals;
  • Network protocols;
  • Targeted attacks;
  • MITRE ATT&CK techniques / sub-techniques;
  • Current and emerging threats;
  • Intrusion lifecycle and nation-state adversary TTPs;
  • Regex & any query language;
• Experience in assessing and developing cybersecurity programs to help mature the security posture prior to an incident;
• Conducting or managing incident response investigations;
• Produce and ensure delivery of high-quality written and verbal reports, presentations, recommendations, findings and documentation;
• Knowledge of cybersecurity standards;
• Full system, hardware, or software V development lifecycle experience (requirements, design, implementation, verification, and testing);
• Knowledge of implementing cybersecurity solution in embedded system such as HSM, secure boot, secure diagnostic, secure on-board communication and secure end-to-end architecture and secure OTA update;
• Knowledge and experience in testing system and software in the context of cybersecurity threats;
• Fluency in English is mandatory; knowledge of German is an advantage.

(Other) Qualification:

• Knowledge of security tool such as ANSYS Medini, Itemris;
• Knowledge of ISO 27001 or other similar security standards;
• Knowledge and experience in Functional Safety and its respective standards such as ISO 26262, IEC 61508;
• Knowledge of project management and productivity tools such as MS Office, Jira.

This job is located in Darmstadt, Germany.

If you think you have what it takes for this job, please send your CV (in English and in Word or PDF) to Viktoria Panicharova, by clicking on the button “Apply for this job” quoting job DE-HP-24005.

An exciting and dynamic international working environment awaits you!