Product Security Risk analyst (H/F)

Description de l'emploi :

Airbus Defence and Space Toulouse is looking for a Space Systems Product Security Risk Analyst to join our Product Security team within the engineering organization.

Product Security department protects Airbus Defence and Space products against intentional malicious acts throughout the product lifecycle.

Our team is responsible for product security governance and performs technical activities such as creating security concepts and ensuring space systems architectures are secured, by performing risk assessments, establishing appropriate requirements, and preparing accreditation dossiers.

Within the Product Security department, you will join a growing team working in a new and challenging international environment where Product Security is becoming a challenge for the space industry and a key competency for the Company and our major space customers. Our scope covers all space-related products and platforms such as Earth observation, Telecommunication, and Navigation satellites.

In your new position as Project Security Risk Analyst, you will participate to various projects from the early phases till the retirement of the systems by performing the product security analyses. You will be fully embedded in the systems engineering process and will support the product architecture definition and design according to the security risks and requirements.

Your tasks and responsibilities :

Prepare, organize workshops, and write security risk analysis on various projects and topics, including threats,

Analyse the impacts of deviations and vulnerabilities on the threat scenarios during all the phases,

Contribute to flow down of the security controls to security with Engineering and Program teams,

Contribute to the implementation of the Product Security governance evolutions,

Contribute to the internal and external audits on Product Security,

Contribute to the accreditation dossiers.

Desired skills and qualifications :

Bachelor's or Master's degree in Security, Telecommunications Engineering, Aerospace Engineering, or Hardware/Software Engineering.

At least 3 years of experience in information security and/or space system design and development.

Experience in security risk analysis

Basic knowledge on usual security standards such as ISO 27001, NIST?

Experience on risk analysis methods, tools and frameworks such as EBIOS RM, ISO27005, MITRE ATT&CK, ED203A, FENCE, or AGILE RM?

Knowledge on Space systems is desirable

Advanced level of oral and written communication skills in English and French.

Ability to work in international teams.

Communication and interpersonal skills, ability to interact with different stakeholders.

#LI-JR1

Cet emploi exige une connaissance des risques de conformité potentiels et un engagement à agir avec intégrité, comme base de la réussite, de la réputation et de la croissance durable de la société.