Product security governance throughout its entire lifecycle
Security Risk Assessment (SRA) execution, including threat and vulnerability evaluations
Proposal of security solutions (architectures and designs) to ensure compliance with requirements
Evaluation of security requirements implemented in solutions proposed by system designers
Management of formal compliance processes (assessment, certification, and accreditation) under national and international regulations (CC/CEM, ITSEC, etc.)
Implementation of secure configurations and hardening of security measures (Firewalls, Gateways, Switches, anti-malware)
Expert support to systems designers and contribution to R&D+I projects
Monitoring of cyber vulnerabilities and impact analysis to identify mitigation measures
Compliance with established internal policies and procedures related to information security
Requirements
Bachelor's or Master's Degree in Telecommunications Engineering, Aerospace Engineering, or Computer Science
Security Clearance: Demonstrated ability to obtain and maintain National / NATO Security Clearance
Advanced Knowledge of Certification Standards: Common Criteria (ISO/IEC 15408), ITSEC, or airworthiness regulations (DO-326A/ED-202A)
C1 Level (Advanced) in English for technical and business communication
Hands-on experience in Security Risk Assessment (SRA) methodologies
Ability to execute hardening on network devices and operating systems
Proficiency with vulnerability monitoring tools
Ability to draft clear and consumable technical documentation