Security Expert

hace 1 mes

Madrid, España ESSP A tiempo completo

ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: EGNOS.

The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning and integrity within safety-of-life services context such as public transportation.

By joining us, you will be in charge of security activities in support of ESSP activities and services delivered to ESSP Customers. If you have at least 5 years’ of experience in IT security or in information systems and networks, preferably in a critical or complex systems (space, aviation, industry sectors) with a good level of English, then this position is for you

**Main responsibilities/activities**:
Under the authority of the CSO, you will perform the following activities:

- Lead the security risk management by performing the risk assessment and remediation plan
- Lead required accreditations of assets (products, facilities, etc);
- Perform threat evolution continuous monitoring, including advance persistent threats (APT),
- Perform vulnerability continuous monitoring based on CERT vulnerability notifications,
- Identify threats and vulnerabilities, ensure proper contingency plans
- Define or challenge architectures in terms of security;
- Propose and implement security functions and solutions, contribute to security projects;
- Define and maintain Business Continuity Plan and Crisis Management on security aspects
- Contribute to the Crisis Management process definition and implementation for Security
- Ensure, in crisis plans, clear precedence rules between safety and security requirements,
- Define, with the Safety team and EASA, methods for conciliating/ordering safety&security constraints
- Provide expertise to the benefit of ESSP, for example by participating to call for tenders.
- Provide technical expertise in support of company’s operational units;
- Ensure reviews and validate within the framework of ESSP's process (changes, anomalies, deviations, etc.);
- Participate in analysis of security events and lead the implementation of mitigation/remediation actions;
- Contribute to the company's and clients' security dashboards;
- Manage potential subcontractors for the accomplishment of the activities.

You will also contribute to the continuous improvement of ESSP security policies and practices, specifically in the context of the ESSP ISO 27001 certified ISMS (Information Security Management System) and Security Management System (Sec-MS) supporting the ESSP ANSP (Air Navigation Service Provider) Certificate.

Consequently you will contribute to:

- Promoting good security practices to the personnel,
- Ensuring a security watch, both technological and regulatory,
- Improving enterprise processes and tools for security management,
- Developing new security services, notably in terms of operational security and cybersecurity,
- Designing, building, assessing and managing innovating technical projects for internal or external clients.

**Profile**:
Very good working knowledge of;
- Security risk assessment methodologies (ISO27005, EBIOS RM, Attack tree )
- Technical security (information systems, networks, physical security, crypto, etc.) and cybersecurity (threats, exploits, vulnerabilities, etc.),

Good knowledge of:

- Information security standards (ISO270xx, NIST, OWASP, ANSSI, ENISA, etc.),
- Business continuity (ISO22301)
- Enterprise IT and security organization aspects (ISMS, etc.),
- Project management,
- French/European applicable regulations to protection of Classified Information (IGI 1300, IGI 2012 )
- Critical systems and their specific constraints (Safety, Continuity)
- Critical systems and associated constraints (space, aviation, industry, etc.).

You are able to:

- Understand, analyse and reformulate users/customers/projects’ needs and requirements;
- Define and write technical documentation; have editorial capabilities;
- Act as consultant and facilitate the decision making process;
- Evaluate the impacts of technologies and solutions on information systems and operations.
- Team work and teaching capabilities
- Rigorous, pragmatic and discreet,
- High English Level (B2-C1) - CECRL,

The knowledge of the following domains would be considered an advantage:

- Knowledge of EGNOS, GNSS and CNS technologies,
- European regulation applicable to Information System Security and to GNSS in particular.

**Job Requirements**:
Available for travels in Europe.

Access to this position requires a “EU-Confidential” Personal Security Clearance (PSC).

**Job Location**: Madrid (Spain)

**Type of Contract**: Full time / Permanent

  • Security Engineering Manager.

    hace 14 horas

    Madrid, España Kudelski Security A tiempo completo

    Stimulating. Motivating. Challenging. Leveraging its long-standing expertise in securing digital content as well as fighting piracy, Kudelski Security, a division of the Kudelski Group, is a provider of cybersecurity solutions and services focused on protecting data, processes and systems for companies and organizations around the world, safeguarding...

  • Security Expert

    hace 1 mes

    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: EGNOS. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning and...

  • Information Security Expert

    hace 1 mes

    Madrid, Madrid, España AXA Group A tiempo completo

    ContextThe Security Consultant plays an integral role in defining and assessing security requirements, security strategy and practices for Group Security and AXA global projects and clients. The security consultant will be required to effectively translate business objectives and risk management strategies into specific security requirements and processes...

  • Security Expert

    hace 1 mes

    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: EGNOS. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning and...

  • Security Expert

    hace 1 mes

    Madrid, España European Satellite Services Provider A tiempo completo

    ESSP, a private company with 7 major European Air Navigation Service Providers as shareholders, manages the operation and supports the adoption of the European Satellite Based Augmentation System to GPS: _EGNOS_. The adoption of this service is rapidly growing given it allows correcting the GPS signal and offers enhanced features with accurate positioning...

  • Technical Expert

    hace 3 semanas

    Madrid, España Dormakaba A tiempo completo

    Safeguarding dormakaba's business activities through the identification, management, and response to security risks, the Technical Expert within the Security Operations Center (SOC) plays a pivotal role in defining and maintaining an effective security architecture within the IT security operations team. An experience that matters: Your skills 4+ years of...

  • Information Security Expert

    hace 1 mes

    Madrid, España AXA Group A tiempo completo

    ContextThe Security Consultant plays an integral role in defining and assessing security requirements, security strategy and practices for Group Security and AXA global projects and clients. The security consultant will be required to effectively translate business objectives and risk management strategies into specific security requirements and processes...

  • Technical Expert

    hace 1 mes

    Madrid, España dormakaba A tiempo completo

    Safeguarding dormakaba's business activities through the identification, management, and response to security risks, the Technical Expert within the Security Operations Center (SOC) plays a pivotal role in defining and maintaining an effective security architecture within the IT security operations team. An experience that matters:  Your skills 4+...

  • Cyber Security Expert

    hace 1 mes

    Madrid, España Rheinmetall Expal Munitions S.A.U. A tiempo completo

    **Cyber Security Expert (M/F/d)** **Rheinmetall Expal Munitions S.A.U. in Madrid** - Rheinmetall - / - **Cyber Security Expert (M/F/d)** - Ref.Nr.: - **ES00026** - Modalidad de contratación: - **Tiempo Completo** - Tipo de contrato: - **Contrato Permanente** QUÉ ESTAMOS BUSCANDO - Análisis sistemáticos, evaluación integral, definición y...

  • Cyber Security Expert

    hace 6 días

    Madrid, España Rheinmetall Expal Munitions S.A.U. A tiempo completo

    **Cyber Security Expert (M/F/d)****Rheinmetall Expal Munitions S.A.U. in Madrid**- Rheinmetall- /- **Cyber Security Expert (M/F/d)**- Ref.Nr.:- **ES00026**- Modalidad de contratación:- **Tiempo Completo**- Tipo de contrato:- **Contrato Permanente**QUÉ ESTAMOS BUSCANDO- Análisis sistemáticos, evaluación integral, definición y coordinación de medidas...

  • Information Security Lead Expert

    hace 18 horas

    Madrid, Madrid, España AXA Group A tiempo completo

    Company statementWith over 102 million customers in 56 countries, AXA's strong global franchises and three lines of expertise - Property & Casualty, Life & Savings and Asset Management - provide a distinctive business portfolio. As a company whose business is to protect people, we have a responsibility to leverage our skills, resources and risk expertise to...

  • Information Security Lead Expert

    hace 21 horas

    Madrid, España AXA Group A tiempo completo

    Company statementWith over 102 million customers in 56 countries, AXA's strong global franchises and three lines of expertise - Property & Casualty, Life & Savings and Asset Management - provide a distinctive business portfolio. As a company whose business is to protect people, we have a responsibility to leverage our skills, resources and risk expertise to...

  • Network Security Engineer

    hace 1 día

    Madrid, España AXA Group A tiempo completo

    We are seeking a talented and experienced Network Security Engineer specialized in VPN (Site to site VPN, user VPN) to join our global team. The ideal candidate will be responsible for designing, implementing, and maintaining the organization's VPN infrastructure.  Responsibilities : Design, implement, and maintain secure network infrastructure, with a...

  • Cyber Security Architect

    hace 1 mes

    Madrid, España SR Technics Group A tiempo completo

    Your tasks Define and coordinate operational security initiatives for new cloud solutions Define and monitor minimal requirements for existing solutions Coordinate IT and security providers in implementing security controls Collaborate with IT and solution architects and engineers in defining new solutions Propose and define new managed cyber...

  • Security Architect, Barcelona

    hace 4 semanas

    Madrid, Madrid, España GrabJobs A tiempo completo

    Security Architect en Barcelona. Perfil buscado (Hombre/Mujer) Support the development of security architectures including defining target states transition plans and roadmaps in alignment with business objectives and IT strategies.Offer direction guidance and collaborate with infrastructure application architecture teams and solution architects to ensure...

  • Eu - Security Monitoring Expert - Remote It · España · Completamente Remoto

    hace 1 mes

    Madrid, España Twtspain A tiempo completo

    At the Whiteam we are looking for a Security Monitoring Expert to join our team remotely and work with European Public Agencies. MAIN TASKS: Design, creation and modification of dashboards for monitoring of security events. Implementation of industry standard correlation rules and design ad-hoc standards and rules. Ensuring monitoring in infrastructure and...

  • Security Consultant

    hace 1 mes

    Madrid, España Kyndryl A tiempo completo

    Who We Are Kyndryl is a market leader that thinks and acts like a start-up. We design, build, manage, and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our...

  • Senior Platform Security Engineer

    hace 4 semanas

    Madrid, España Celonis A tiempo completo

    The Team: Our Global information security organization is responsible for security and trust. We think about security-offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape. The security engineering team is always looking for talented subject matter experts in...

  • Iam Expert

    hace 4 semanas

    Madrid, España Kaprestechnology A tiempo completo

    At Kapres Technology we are looking for a IAM expert to work for a multinational client in the insurance sector. Services: -Performing scans and reports; -Using the Qualys Guard tool; -Performing and scheduling compliance and vulnerability scans on the company's network activity and infrastructure and generating reports to different teams (such as server...

  • Experto En Qa

    hace 3 días

    Madrid, España Azertium It Global Services Sl A tiempo completo

    Descripción¡Estamos ampliando el equipo! ¡En Azertium IT te buscamos! Nos urge incorporar un Experto en QA con al menos 3 años de experiência en el puesto y sector IT, para formar parte de nuestro equipo con grandes retos, trayectoria y crecimiento profesional.Modalidad de trabajo 100% EN REMOTO.Experiência requerida:- Experto en QA con 3 años de...