Information Security Engineer (ESA-ESTEC)

Package Description

What we offer if you join our amazing team:

• Competitive Salary 

• Corporate Benefits Package 

• Support provided to EU Nationals requiring relocation – Information available upon request

• Company events

Job Introduction

We have an exciting (and challenging) opening for an Information Security Engineer​ in Noordwijk. 

Dynamic, Energetic, Entrepreneurial, Highly Motivated, Resilient … If this describes you then we would love to hear from you :) 

Discover the offer below and click on ‘Apply’ if you know that your skillset and talents are a suitable match for this opportunity.

• Serco – The employer of choice for a career within the Space Sector.

Serco are a trusted provider of services to National Space Agencies and the European Space Agency (ESA), we have over 40 years’ experience supporting the space sector and providing services for all stages of our customer’s space missions.

• Join our community of space specialists across Europe

We are proud to support the European institutional Space landscape: Serco boasts an extensive network of Space professionals located at our offices in Darmstadt, Noordwijk, Frascati, Paris and Madrid, all within close proximity of our two largest space sector customers, European Space Agency/European Space Operations Centre (ESA/ESOC) and European Organisation for the Exploitation of Meteorological Satellites (EUMETSAT).

• Supporting Women in Aerospace

Diversity and Inclusion is extremely important to us. Supporting women's opportunities, development and visibility in the space sector is key and that is why we are proud members and supporters of Women in Aerospace Europe, a dynamic and global network supporting women's careers in Aerospace.

Women in Aerospace Europe (WIA-E) – Supporting women in STEM (wia-europe.org)

Main Responsibilities

As an Information Security Engineer​ you will concentrate your activities on the following:

• Security Monitoring and Analytics:
  • SIEM technologies.
  • SPLUNK.
  • Syslog.
• Security Awareness:
  • Develop and deliver security awareness and compliance training programs.
  • Conduct knowledge transfer training sessions to security operations team upon technology implementation. Support the Risk Management and Configuration Management processes within the ESA Project Team, including the disposition of requests for Deviations and Requests for Waivers (RFDs & RFWs).
• Forensics Analysis:
  • Utilize investigative methods, forensic software and hardware to locate specific electronic data including: internal and external e-mail; Internet history usage; documents, malware; and other files to support ESACERT Service manager.
• Vulnerability Management:
  • Utilize standard vulnerability tools like Nessus, Acunetix , OpenVas.
• Security Intelligence:
  • Integration within existing tool of Security Intelligence services.
  • Knowledge of OSINT tools.
  • MISP.
• Incident Response:
  • Incident Handling & Reporting.
  • Vulnerability Scanning.
  • SIEM Log Analysis.
  • Firewall Analysis.
  • Malware and APT.
• ICT Infrastructure management:
  • Maintaining CERT technical environment infrastructure.
  • Servers, Appliances, VMs and workstations used for the daily security activities.
• Analysis of ESA environment software/hardware against security risks:
  • Security White Papers
• The candidate shall be ready to apply, upon ESA request, for national security clearance.
• The candidate shall not respond to or be employed by a company that plays major roles in the delivery of IT/Technical services to ESA.
• Zed! Is a software solution from Primex technology that has been selected as EU dual approved encryption technology suitable for ESA classified documents up to ‘’Restricted’’. Zed! Uses encrypted containers to protect file transport regardless of the method used (email attachment, USB stick, removable device, file transfer, etc.) Support needs to be provided to end-users all over the Agency for:
  • ZED! Secure software installation, configuration and disposal according to existing procedures on supported platform (Windows, VDI/MAC).
  • Preparation and maintenance of ZED! Guideline for secure utilization of the software within the ESA environment.
  • Troubleshooting and supporting user requests who has issues with the software.
  • Incident Management.

Successful Candidate

Do you think you are the person we are looking for? See below what experience or knowledge you should bring:

• Master’s degree in a relevant discipline.
• Minimum of 4 years’ relevant experience.
• Required basic knowledge:
  • Good knowledge of Networking and TCP/IP protocols
  • Operating Systems: Unix/Linux, Windows XP/7/2008/2012, VMWare.
  • Programming Languages: C, C++ (at least one).
  • Scripting Languages: PHP, Python, Perl (at least one).
  • Knowledge of Firewall, IDS/IPS, proxies and VPN Gateways.
• Required advanced knowledge:
  • Experience in CERT or SOC (Blue team).
  • SIEM, Investigation skills on centralized log management systems
  • Penetration test and Vulnerability Assessment (Red team)
  • Malware analysis (static and dynamic) with knowledge on Sandbox devices.
  • Strong experience in Encryption technology and tools (e.g. ZED!, PGP,PKI).
• Other skills:
  • Project Management
  • Good interpersonal and diplomatic skills and team player
  • Writing User Manuals
  • Writing and managing Project and Service Documentation
  • Working knowledge of data protection based on a defense-in-depth approach
  • Working knowledge of the ITIL and the ISO27000 Framework
  • Knowledge of the EU Data Classification model is an asset
  • Willing to travel for user community related requirements and issues.
• Professional Certifications related Security skills are considered an asset:
  • EC-Council, (http://www.eccouncil.org) Certified Ethical Hacker
  • GIAC, http://www.giac.org/
  • Certified Incident handler,
  • Certified penetration tester,
  • Certified Forensic analyst
  • Offensive Security, http://www.offensive-security.com/
• Excellent interpersonal skills are needed, together with a high degree organizational and communication abilities, and comfortable with working in a diverse and multinational team environment.
• Proficient in the English language, both written and spoken
• Knowledge of another official ESA language is an asset.
• Candidates must be eligible to work in the EU.

-------------------

Important:

Any offer of employment is contingent upon you providing documents to verify your identity and employment eligibility, as required by law.

Applicants are reminded that they will be requested to produce such documentation during the recruitment process.

Please contact a member of the recruitment team if you require further details of acceptable types of documentation required for verification of identity and work authorization. 

Data Protection:

When creating a profile on the Serco Career Centre you agreed to the Data Protection policy, a copy is available upon request.You may submit a written request revoking your consent to this agreement at any time.

About the Company

Why should you join Serco ?

At Serco not only is the nature of the work we do important, everyone has an important role to play.

Meaningful and vital work - You’ll contribute to methodologically intercepting challenges whilst achievements will also be recognised and celebrated.

A world of opportunity - You’ll be wholeheartedly supported with development and career progression

Great people - You’ll become an integral member of a well-defined and supportive team who believe passionately in the value of our work.

What we offer

• Chance to contribute to innovation in the public services sector
• A company passionate about diversity and inclusion
• Permanent employment with comprehensive Serco Benefits package.

About Serco

At Serco, not only is the nature of the work we do important, everyone has an important role to play when managing complex public services.  

We are a team of 60,000 people responsible for delivering essential public services around the world, we are innovators, committed to redesigning and improving public services for the benefit of everyone.

By joining Serco you will have unlimited access to our Global Employee Networks – SercoInspire (Gender), SercoEmbrace (Multicultural), SercoUnlimited (Disability) and In@Serco (LGBT & Networks). Serco Employee Networks, led by colleagues who are passionate about diversity, inclusion and belonging. 

Apply

Please click on the apply button to be taken to our careers website

Serco is a Disability Confident Employer committed to employing and retaining people with disabilities.  Disabled applicants who meet the minimum criteria for the job will be given the opportunity to demonstrate their abilities at an interview.

More at:

https://www.serco.com/eu/sector-expertise/space

https://www.serco.com/eu/careers/careers-in-space