Information Security Engineer

EUMETSAT is Europe's meteorological satellite agency - monitoring the weather and climate from space - 24 hours a day, 365 days a year.

Working for EUMETSAT, you can make a world of difference and be a part of something that makes a positive impact on society. You will be at the cutting edge of satellite technology, with a meaningful role in an organisation focused on space-based observations of the Earth's weather and climate.

Within the energetic international environment of EUMETSAT, an Information Security Engineer is sought to support the evolution, development and deployment of information security services, infrastructure, and solutions for current and emerging business needs.

The Information Security Engineer will work in the Technical and Scientific Support (TSS) department of the EUMETSAT matrix organisation, as part of the growing Security Team within the IT and Data Infrastructures Division (I2D).

The successful candidate will be actively engaged in implementing the forward information security roadmap, with a focus on consolidating information security services and state-of the-art operational security solutions, improving security of satellite ground segments, cloud deployments and Big Data services.

EUMETSAT as an organisation is entering an interesting and challenging period, with multiple satellite launches planned over the next few years, alongside a transformational programme of wide-ranging technology refresh projects, many of which I2D and the Security Team shall be actively involved in.

What you'll be doing

• Own the end‑to‑end vulnerability management lifecycle across cloud/K8s/endpoints/applications. In particular, the Information Security Engineer will be leveraging existing protection, detection, response solutions and coordination of red-teaming services to obtain the maximum benefit for EUMETSAT.
• Supervise and coordinate the implementation and operation of new and innovative solutions designed to support security operations. In particular, the Information Security Engineer will operationalise threat intelligence handling and integrate AI and playbook-based automations into the overall security operations.
• Contributing to the continuous improvement of security operations.
• Maintain appropriate contacts with special interest groups relating to information security, and/or other relevant specialist forums.

What we offer

• Excellent salary, of up to Euro 9,000 NET (after tax) based on skills and experience
• Flexible working time including additional flexi-leave
• Full medical coverage for employee and family
• Attractive pension
• 30 days of annual leave days public holidays
• Training and development support
• Relocation allowance and support (if applicable)

Requirements

Qualifications

• A university degree (or several years relevant experience) in a relevant discipline e.g. IT Security.
• CISSP or a similar certification would be an advantage.

Skills and Experience Requirements:

EUMESTAT welcomes candidates who possess either a robust foundation of knowledge, direct relevant experience in the following:

• Implementation, operation, and maintenance of an Information Security Management System (ISMS). This should include active participation in security operations activities, and preferably be obtained from experience within 24/7 high-availability environments.
• Proven ownership of vulnerability management lifecycle at scale in complex environments, in particular within an operational/production environment.
• Remediation engineering for cloud/K8s/endpoints/applications in the scope of a Vulnerability Management and/or a Security Operations Centre.
• Excellent interpersonal, communication and teamwork skills.
• Critical thinking with a methodical, proactive and organised approach to work, combined with an aptitude for detail and accuracy.
• Excellent time management and demonstrated ability to work efficiently under pressure / in emergencies.

Following skills are beneficial but not mandatory:

• Engineering of requirements and IT Security solutions for networks, computer systems, containers and application software, covering the whole engineering process from use case and requirements definition to verification and validation.
• Threat modelling and definition of high-level and low-level designs, following Secure-by-design.
• Experience implementing Zero Trust.

APPLICATIONS MUST BE SUBMITTED IN ENGLISH. WE WILL BE UNABLE TO CONSIDER APPLICATIONS SUBMITTED IN OTHER LANGUAGES.

EUMETSAT is an international organisation employing staff from across all 30 member states and this role is being advertised on multiple international job boards, but please note that this role would be based in Darmstadt, Germany and would require international applicants to relocate if successful. Teleworking will not be possible.

More about us

EUMETSAT's role is to establish and operate meteorological satellites to monitor the weather and climate from space - 24 hours a day, 365 days a year. This information is supplied to the National Meteorological Services of the organisation's Member and Cooperating States in Europe, as well as other users worldwide.

EUMETSAT also operates several Copernicus missions on behalf of the European Union and provide data services to the Copernicus marine and atmospheric services and their users.

NB As an intergovernmental European Organisation, EUMETSAT can recruit nationals only from the 30 Member States
(Austria, Belgium, Bulgaria, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, The Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom).

Work permits and resident visas do not meet the requirements of this policy.

Candidates must be passport holding citizens of one of these member states.