Security Expert

hace 2 meses


Madrid, España European Satellite Services Provider A tiempo completo

ESSP, a dynamic French company open to the world, is looking for a **Security Expert** for a **Permanent Full-time Contract** in **Madrid**.

We work with highly skilled teams and our employees come from different backgrounds and disciplines, from aeronautics to aerospace, engineering to telecommunications. This diversity allows the company great flexibility to adapt to new needs and challenges.

We are eager to provide the best quality services through safe and efficient operations and management systems. We are expanding and always looking for new talents.

Some videos are also available on _**YouTube**_ for you to discover our activities:

- _EGNOS_
- _EGNOS Support services_
- _EGNOS for Maritime_***

And a lot more videos are available.

By joining us, you will be in charge of security activities in support of ESSP activities and services delivered to ESSP Customers. If you have at least **5 years’ of experience in IT security or in information systems and networks**, preferably in a **critical or complex systems** (space, aviation, industry sectors) with a good level of English, then this position is for you

**Your main responsibilities/activities will be**:
Under the authority of the CSO, you will perform the following activities:

- Lead or contribute to the security risk management by performing the **risk assessment** and propose the **remediation plan** and follow it up until implementation
- Lead required accreditations of assets (products, facilities, etc)
- Perform threat evolution continuous monitoring, including advance persistent threats (APT)
- Perform vulnerability continuous monitoring based on CERT vulnerability notifications
- For selected feared events, identify threats and vulnerabilities, ensure proper contingency plans are defined and implement security requirements
- Define or challenge architectures in terms of security
- Propose and implement security functions and solutions, contribute to security projects
- Define and maintain Business Continuity Plan and Crisis Management on security aspects
- Contribute to the Crisis Management process definition and implementation for Security
- Ensure, in crisis plans, clear precedence rules between safety and security requirements
- Define, with the Safety team and EASA, methods for conciliating/ordering safety&security constraints
- Provide expertise to the benefit of ESSP, for example by participating to call for tenders
- Provide technical expertise in support of company’s operational units
- Ensure reviews and validate within the framework of ESSP's process (changes, anomalies, deviations, etc.)
- Participate in analysis of security events and lead the implementation of mitigation/remediation actions
- Contribute to the company's and clients' security dashboards
- Manage potential subcontractors for the accomplishment of the activities

You will also contribute to the continuous improvement of ESSP security policies and practices, specifically in the context of the ESSP ISO 27001 certified ISMS (Information Security Management System) and Security Management System (Sec-MS) supporting the ESSP ANSP (Air Navigation Service Provider) Certificate.

Consequently you will contribute to:

- Promoting good security practices to the personnel,
- Ensuring a security watch, both technological and regulatory,
- Improving enterprise processes and tools for security management,
- Developing new security services, notably in terms of operational security and cybersecurity,
- Designing, building, assessing and managing innovating technical projects for internal or external clients.

**Profile researched**:
Very good working knowledge of:

- **Security risk assessment methodologies** (ISO27005, EBIOS RM, Attack tree )
- **Technical security** (information systems, networks, physical security, crypto, etc.) and **cybersecurity **(threats, exploits, vulnerabilities, etc.)

Good knowledge of:

- **Information security standards** (ISO270xx, NIST, OWASP, ANSSI, ENISA, etc.),
- Business continuity (ISO22301)
- Enterprise IT and security organization aspects (ISMS, etc.)
- Project management
- French/European applicable regulations to protection of Classified Information (IGI 1300, IGI 2012 )
- Critical systems and their specific constraints (Safety, Continuity)
- Critical systems and associated constraints (space, aviation, industry, etc.)

You are able to:

- Understand, analyse and reformulate users/customers/projects’ needs and requirements
- Define and write technical documentation; have editorial capabilities
- Act as consultant and facilitate the decision making process
- Evaluate the impacts of technologies and solutions on information systems and operations
- Team work and teaching capabilities
- Rigorous, pragmatic and discreet
- High English Level (B2-C1) - CECRL

The knowledge of the following domains would be considered an advantage:

- Knowledge of EGNOS, GNSS and CNS technologies,
- European regulation applicable to Information Syst



  • Madrid, España Twtspain A tiempo completo

    EU - Security Monitoring Expert - REMOTE At the Whiteam we are looking for a Security Monitoring Expert to join our team remotely and work with European Public Agencies. At the Whiteam we are looking for a Security Monitoring Expert to join our team remotely and work with European Public Agencies.MAIN TASKS:Design, creation and modification of dashboards for...


  • Madrid, España Twtspain A tiempo completo

    EU - Security Monitoring Expert - REMOTE At the Whiteam we are looking for a Security Monitoring Expert to join our team remotely and work with European Public Agencies. At the Whiteam we are looking for a Security Monitoring Expert to join our team remotely and work with European Public Agencies.MAIN TASKS:Design, creation and modification of dashboards for...


  • Madrid, España Kudelski Security A tiempo completo

    Stimulating. Motivating. Challenging. Leveraging its long-standing expertise in securing digital content as well as fighting piracy, Kudelski Security, a division of the Kudelski Group, is a provider of cybersecurity solutions and services focused on protecting data, processes and systems for companies and organizations around the world, safeguarding...


  • Madrid, España Kudelski Security A tiempo completo

    Stimulating. Motivating. Challenging. Leveraging its long-standing expertise in securing digital content as well as fighting piracy, Kudelski Security, a division of the Kudelski Group, is a provider of cybersecurity solutions and services focused on protecting data, processes and systems for companies and organizations around the world, safeguarding...


  • Madrid, España Kudelski Security A tiempo completo

    Stimulating. Motivating. Challenging. Leveraging its long-standing expertise in securing digital content as well as fighting piracy, Kudelski Security, a division of the Kudelski Group, is a provider of cybersecurity solutions and services focused on protecting data, processes and systems for companies and organizations around the world, safeguarding...

  • Security Expert

    hace 2 meses


    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: EGNOS. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning and...

  • Security Expert

    hace 2 meses


    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: EGNOS. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning and...

  • Security Expert

    hace 2 meses


    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: _EGNOS_. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning...

  • Security Expert

    hace 3 horas


    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: _EGNOS_. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning...

  • Security Expert

    hace 5 días


    Madrid, España European Satellite Services Provider A tiempo completo

    Created in 2009, **ESSP **is a young and dynamic company, a **pan European service provider**, certified by EASA (the European Union Aviation Safety Agency) to deliver safety-critical services. Our mission is to operate and provide **Communication, Navigation and Surveillance**(CNS) services, among which, the main one is, the **EGNOS service** (the European...

  • Security Expert

    hace 3 horas


    Madrid, España European Satellite Services Provider A tiempo completo

    Created in 2009, **ESSP **is a young and dynamic company, a **pan European service provider**, certified by EASA (the European Union Aviation Safety Agency) to deliver safety-critical services. Our mission is to operate and provide **Communication, Navigation and Surveillance**(CNS) services, among which, the main one is, the **EGNOS service** (the European...


  • Madrid, Madrid, España AXA Group A tiempo completo

    ContextThe Security Consultant plays an integral role in defining and assessing security requirements, security strategy and practices for Group Security and AXA global projects and clients. The security consultant will be required to effectively translate business objectives and risk management strategies into specific security requirements and processes...


  • Madrid, Madrid, España AXA Group A tiempo completo

    ContextThe Security Consultant plays an integral role in defining and assessing security requirements, security strategy and practices for Group Security and AXA global projects and clients. The security consultant will be required to effectively translate business objectives and risk management strategies into specific security requirements and processes...

  • Technical Expert

    hace 1 mes


    Madrid, España Dormakaba A tiempo completo

    Safeguarding dormakaba's business activities through the identification, management, and response to security risks, the Technical Expert within the Security Operations Center (SOC) plays a pivotal role in defining and maintaining an effective security architecture within the IT security operations team. An experience that matters: Your skills 4+ years of...


  • Madrid, España AXA Group A tiempo completo

    ContextThe Security Consultant plays an integral role in defining and assessing security requirements, security strategy and practices for Group Security and AXA global projects and clients. The security consultant will be required to effectively translate business objectives and risk management strategies into specific security requirements and processes...


  • Madrid, España AXA Group A tiempo completo

    ContextThe Security Consultant plays an integral role in defining and assessing security requirements, security strategy and practices for Group Security and AXA global projects and clients. The security consultant will be required to effectively translate business objectives and risk management strategies into specific security requirements and processes...

  • Technical Expert

    hace 2 meses


    Madrid, España dormakaba A tiempo completo

    Safeguarding dormakaba's business activities through the identification, management, and response to security risks, the Technical Expert within the Security Operations Center (SOC) plays a pivotal role in defining and maintaining an effective security architecture within the IT security operations team. An experience that matters:  Your skills 4+...

  • Technical Expert

    hace 1 semana


    Madrid, España dormakaba A tiempo completo

    Safeguarding dormakaba's business activities through the identification, management, and response to security risks, the Technical Expert within the Security Operations Center (SOC) plays a pivotal role in defining and maintaining an effective security architecture within the IT security operations team. An experience that matters:  Your skills 4+...


  • Madrid, España Siemens A tiempo completo

    Within Smart Infrastructure, the Cybersecurity Community is the trusted partner, enabling the business units to achieve their ambition level in a holistic way. Together we make Cybersecurity real - To create environments that care. We are looking for a Product and Solution Security Expert for Architecture and Design. **What role will you play?** - Support...

  • Cyber Security Expert

    hace 2 meses


    Madrid, España Rheinmetall Expal Munitions S.A.U. A tiempo completo

    **Cyber Security Expert (M/F/d)** **Rheinmetall Expal Munitions S.A.U. in Madrid** - Rheinmetall - / - **Cyber Security Expert (M/F/d)** - Ref.Nr.: - **ES00026** - Modalidad de contratación: - **Tiempo Completo** - Tipo de contrato: - **Contrato Permanente** QUÉ ESTAMOS BUSCANDO - Análisis sistemáticos, evaluación integral, definición y...