CYBERSECURITY ENGINEER

Aurora is a large Service provider of engineering and scientific support at ESA/ESAC. Employees are our key resource! We know that progress is only achieved by a happy motivated team, that’s why Aurora employs top quality staff by offering challenging work, responsibility, a pleasant environment and excellent remuneration.Specific Service TasksThe tasks below define the primary duties and responsibilities essential for successful service delivery in this role:Contribute to the definition, analysis, and consolidation of system cybersecurity requirements of science missions/projects.Support the development of cybersecurity architecture tailored to science missions/projects needs.Support system reviews through projects’ lifecycle on security aspects.Analyse vulnerabilities, assess their impact and propose suitable security mitigations and countermeasures.Provide support and cybersecurity advice to the Cybersecurity Manager.Developing and maintaining cybersecurity policies, standards, procedures and best practices.Overseeing the cybersecurity lifecycle within Department of Science (D/SCI) projects/missionsPrepare technical documentation, reports, and presentations on different cybersecurity topics to different stakeholders.Perform threat analysis, risk identification, assessment, and prioritization.Support Cybersecurity Manager in cybersecurity audits and assessments.Support Cybersecurity Manager in the evaluation of new cybersecurity tools and technologies.Conduct digital forensics analysis to collect, preserve, and analyze electronic evidence, supporting thorough investigations and root cause analysis.Coordinate and execute incident response activities to detect, contain, and remediate security incidents effectively, with a focus on minimizing impact and ensuring minimal operational disruption.Cybersecurity awareness and training for D/SCI missions/projectsDesign, implement, and maintain cybersecurity solutions to protect enterprise environments.Develop and maintain secure configuration standards (hardening) for science systems and applications.Collaborate with cross-functional teams to ensure secure deployment of applications and infrastructure.Specific qualification requirementsThese are the essential qualifications and competencies required for candidates to successfully perform the duties of the cybersecurity engineering position:Master’s (or bachelor’s +10 years of relevant work experience) degree or equivalent in Engineering (preferably in Computer Science/Cybersecurity/Telecommunications).3+ years of proven experience in cybersecurity engineering or a related role.Experience in identifying and assessing security vulnerabilities across systems and applications, providing actionable security recommendations.Ability to conduct cybersecurity risk assessments, evaluate security controls, and recommend improvements to enhance security posture.Strong understanding of networking fundamentals with an emphasis on cybersecurity controls and threat mitigation.Proven experience in managing and responding to cybersecurity incidents.Hands-on experience with digital forensics techniques and tools to collect, preserve, and analyze digital evidence for root cause determination during investigations.Experience with Linux operating systems, including system configuration and security hardening.Experience with container security tools and technologies, such as Docker, Podman, Kubernetes, and CNNAP, along with a solid understanding of microservices architectures and secure container orchestration.Experience in creating technical documentation and reports.Analytical mindset paired with a “can-do” attitude and enthusiasm for learning.Good problem-solving skills and critical thinking skills.You must be able to work in English.Strong communication skills, both written and verbalAbility to collaborate effectively with cross-functional teams—including IT, development, and management—to integrate cybersecurity goals seamlessly with science mission/project objectives.Motivation to stay updated on new cybersecurity trends, tools, and best practices through continuous learning.Strong ability to encourage teamwork and create a positive team environment.Preferred Skills and QualificationsThe following skills and qualifications are valued and will give candidates a competitive advantage in this position:Relevant certifications such as SANS GIAC, Offensive Security (OSCP, OSCE, OSWE, OSEE), cloud security certifications (AWS, Azure, GCP), CISSP, CISM, CEH, or a master’s degree in cybersecurity are highly valued and considered a plus.Familiarity with cloud security tools and frameworks (e.g., AWS, Azure, GCP).Knowledge of DevSecOps practices and CI/CD pipeline integration.Demonstrated ability to apply security best practices at every phase of the Software. Development Life Cycle (SDLC) to enhance security and minimize vulnerabilities.Familiarity with IAM principles and tools, particularly role-based access control (RBAC) and single sign-on (SSO) solutions.Experience with scripting or programming languages (e.g., Python, Bash, PowerShell) for automating security tasks.Familiarity with regulatory compliance frameworks such as GDPR, NIST or ISO 27001.Experience working in an international environment.Legal and Security RequirementsAll applicants must be legally allowed to work in Spain without the need to obtain a work visa. Only European Union (EU), European Economic Area (EEA) and SWISS citizens can be employed by Aurora in Spain.Applicants are required to provide a copy of their passport and degree certificate. Aurora will validate the Degree with the issuing University and provide evidence to ESA.In line with ESA’s security requirements, prior to issuing a letter of employment the applicant shall provide to Aurora a recent official document declaring that they are of good conduct from the country where currently resident, and Aurora will validate your employment history.LocationThe work will be performed at the ESAC , the European Space Astronomy Centre at Villafranca del Castillo, near Madrid (Spain).ContractThe selected candidate will receive good remuneration in line with responsibility.You will be registered for both social security and tax in Spain.The standard working hours are 40 per week. There are 12 public holidays and an additional 30 annual days holiday.In addition to public health services Aurora provides private medical insurance in Spain.Training to improve efficiency and provide strength for future career are of course included.Aurora can assist financially and provide recent experience information for relocation.Aurora has a teleworking policy; the main home must be within commuting distance to the work location.To be considered for this PositionAurora shall select a candidate as soon as a good candidate has been identified. Please apply via our Job Application form quoting SCO-11_CybSecEng as reference.If not directly interested, feel free to share by this Job Vacancy with your friends!“That’s one small click to apply, one giant leap for your career development.”