Advanced Information Security Engineer

Are you looking for a new opportunity to join an international group with a successful track record in Space Engineering?

We are looking for an Advanced Information Security Engineer to work at EUMETSAT’s premises in Darmstadt, Germany. This key role will not only allow you to guide, advise and support the client in its security systems, but with a broad variety of tasks and topics to investigate, to also develop your own specialisation, with your own research’s, curiosity and self-motivation.

About the client and location

The European Organisation for the Exploration of Meteorological Satellites (EUMETSAT) is a political organisation comprising of 30 European member states. EUMETSAT operates satellites to monitor weather, climate, and the changing environment. They are responsible for helping to isolate potentially dangerous weather conditions that could affect air travel, farming and other key service industries.

Tasks and activities

• Trade‑off, prototyping, design and implementation of new IT and network security solutions protecting EUMETSAT’s assets, data and people against loss of integrity, availability and confidentiality and detecting existing security gaps.
• Operations, maintenance, evolutions and troubleshooting of IT and network security solutions.
• IT security assessments and verification of compliance of activities within EUMETSAT with the applicable information security requirements.
• Operations, maintenance and troubleshooting of the security aspects of IT and network infrastructure, including systems supporting critical operations.
• Full lifecycle of activities related to IT systems vulnerability management.
• Participation in the EUMETSAT Computer Emergency Response Team (CERT), including provisioning of stand‑by/on‑call and incident management.
• Providing regular generation of IT security reports and metrics.
• Performing threat intelligence, threat hunting, malware and log analysis, asset identification and management, status reporting, and forensic analysis activities.

Skills and experience

• University degree (or equivalent) in a relevant discipline.
• Experience with vulnerability management in particular performing vulnerability assessments.
• Basic knowledge of ISO/IEC 27001 and 27002.
• Desire to work both autonomously and as part of a team, in an international multicultural environment.
• Solution oriented mindset, with a customer focused communication skill.
• Fluent in English, both written and spoken.

Experience or in-depth knowledge in one of more of the following:

• Designing, implementing and delivering large-scale enterprise security solutions.
• Administration and maintenance of CyberArk in production.
• Rapid7 insightVM, performing vulnerability scans on equipment in production / operations.
• Administration and maintenance of TrendMicro Deep Security in production on operational equipment.
• Performing risk assessments for systems both in development and in production.
• Security-focused auditing for compliance to either security requirements or standards like ISO/IEC 27000‑series.
• Administration and maintenance of firewalls (CISCO ASA, CISCO FirePower and Palo Alto).
• Patching and hardening of infrastructure in an operational environment.
• Incident response and 24/7 CERT activities.
• Malware analysis techniques, tools and processes.
• Strong knowledge of threat hunting and threat intelligence gathering techniques, tools, and processes.