E-GNSS Security Administrator

We are looking for:

• 1 E-GNSS Security Administrator (Junior)
• 1 E-GNSS Security Administrator (Senior)

to join the cybersecurity team supporting the E-GNSS Transversal infrastructure, within the framework of the EGNSS Transversal Service (ETS).

WHAT WE LOOK FOR

• Degree in Engineering, Computer Science, Cybersecurity or another STEM discipline.
• Previous experience in Cybersecurity, IT Security, System Administration or Security Operations.
• Practical knowledge of user access and permissions management, including account creation, modification and revocation.
• Knowledge of security tokens, keys and digital certificates.
• Familiarity with HW/SW security configuration, hardening and lockdown activities.
• Knowledge of security tools, patching and antivirus management.
• Basic experience with backup and restore activities and business continuity/disaster recovery concepts.
• Knowledge of handling classified and sensitive information according to security procedures.
• Ability to work effectively within a multidisciplinary and international team.
• English proficiency, both written and spoken.
• Spanish is considered an additional preference, but is not mandatory.
• Experience in GNSS, aerospace or other critical infrastructures will be considered a strong plus.
• Cybersecurity certifications such as GSEC, GIAC, CISSP or CCSP are considered an advantage.
• Availability to work on-site in Torrejon. Partial remote working could be agreed with the Customer upon contract start.
• Willingness to provide on-call support outside regular working hours.

WHAT YOU WILL DO

As a E-GNSS Security Administrator, you will support the day-to-day cybersecurity administration of the EGNSS Transversal infrastructure.

Your main responsibilities will include:

• Manage user access and permissions, creating, modifying and revoking user accounts according to the principle of least privilege.
• Perform user-management activities such as security token management and account unblocking.
• Manage keys and certificates, including renewal and revocation of credentials required for secure communications, under the instructions of the Cyber Security Manager and Security Officer.
• Perform operations and maintenance activities related to Hardware Security Modules (HSMs), Data Diodes, Gateways and other security devices.
• Apply secure configurations to hardware and software components in accordance with approved hardening procedures and guidelines.
• Perform lockdown activities under the responsibility of the Security Administration function.
• Install security patches and update antivirus and other security tools, ensuring that security solutions remain correctly configured and operational.
• Execute backup and restore activities and support backup and disaster-recovery strategies aimed at maintaining business continuity.
• Handle classified and sensitive data, including data extraction, import/export and sanitisation activities in accordance with Local SecOps and applicable classification procedures.
• Apply appropriate encryption and data-protection measures to ensure the confidentiality, integrity and availability of information.
• Execute corrective and preventive actions following security incidents or operational anomalies, under the direction of the Security Officer and Cyber Security Manager.
• Support security audits, penetration tests and compliance checks, providing evidence and operational support to the relevant cybersecurity and audit teams.
• Develop and update security procedures associated with Security Administration activities.
• Support the preparation of cybersecurity documentation and reports, retrieving information from the operational platforms. This includes contributions to Network Maps, Infrastructure Limitations Reports, Operational Mitigations Reports and Lockdown Reports.
• Support the applicable cybersecurity KPIs, particularly those related to security incidents and vulnerabilities identification and analysis.
• Participate in operational activities associated with the Galileo dual-site infrastructure, including support to the backup site when required.
• Support handover simulation exercises, including temporary on-site presence at the backup site.
• Support unplanned handovers when activated, including on-call availability outside normal working hours.

BENEFITS

The successful candidate will be offered a permanent contract together with a competitive salary package based on experience and skills.

Additional benefits include:

✔ Health coverage as provided by the National Collective Agreement
✔ Professional training and career development
✔ Flexible working hours
✔ Team-building activities
✔ Relocation support, where applicable

✔ The gross annual salary (RAL) will be commensurate with experience and seniority:
Junior: €28,000 – €41,000
Senior: €42,000 – €52,000

LOCATION

Torrejon (Madrid) – Spain
Travel required to Toulouse