VN 25/71 Information Security Engineer (up to 2 posts)

Within the energetic international environment of EUMETSAT, an Information Security Engineer is sought to support the evolution, development and deployment of information security services, infrastructure, and solutions for current and emerging business needs.

The Information Security Engineer will work in the Technical and Scientific Support (TSS) department of the EUMETSAT matrix organisation, as part of the growing Security Team within the IT and Data Infrastructures Division (I2D).

The successful candidate will be actively engaged in implementing the forward information security roadmap, with a focus on consolidating information security services and state-of the-art operational security solutions, improving security of satellite ground segments, cloud deployments and Big Data services.

EUMETSAT as an organisation is entering an interesting and challenging period, with multiple satellite launches planned over the next few years, alongside a transformational programme of wide-ranging technology refresh projects, many of which I2D and the Security Team shall be actively involved in.

• Own the end‑to‑end vulnerability management lifecycle across cloud/K8s/endpoints/applications. In particular, the Information Security Engineer will be leveraging existing protection, detection, response solutions and coordination of red-teaming services to obtain the maximum benefit for EUMETSAT.
• Supervise and coordinate the implementation and operation of new and innovative solutions designed to support security operations. In particular, the Information Security Engineer will operationalise threat intelligence handling and integrate AI and playbook-based automations into the overall security operations.

• Contributing to the continuous improvement of security operations.
• Maintain appropriate contacts with special interest groups relating to information security, and/or other relevant specialist forums.

• Implementation, operation, and maintenance of an Information Security Management System (ISMS). This should include active participation in security operations activities, and preferably be obtained from experience within 24/7 high-availability environments.
• Proven ownership of vulnerability management lifecycle at scale in complex environments, in particular within an operational/production environment.
• Remediation engineering for cloud/K8s/endpoints/applications in the scope of a Vulnerability Management and/or a Security Operations Centre.
• Excellent interpersonal, communication and teamwork skills.
• Critical thinking with a methodical, proactive and organised approach to work, combined with an aptitude for detail and accuracy.
• Excellent time management and demonstrated ability to work efficiently under pressure / in emergencies.

Following skills are beneficial but not mandatory:

• Engineering of requirements and IT Security solutions for networks, computer systems, containers and application software, covering the whole engineering process from use case and requirements definition to verification and validation.
• Threat modelling and definition of high-level and low-level designs, following Secure-by-design.
• Experience implementing Zero Trust.